Oct 2 19:01:52.759536 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 19:01:52.759555 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 19:01:52.759563 kernel: efi: EFI v2.70 by EDK II Oct 2 19:01:52.759569 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 19:01:52.759574 kernel: random: crng init done Oct 2 19:01:52.759579 kernel: ACPI: Early table checksum verification disabled Oct 2 19:01:52.759585 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 19:01:52.759592 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 19:01:52.759597 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759603 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759608 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759613 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759619 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759625 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759632 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759638 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759644 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:01:52.759650 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 19:01:52.759655 kernel: NUMA: Failed to initialise from firmware Oct 2 19:01:52.759661 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:01:52.759667 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Oct 2 19:01:52.759672 kernel: Zone ranges: Oct 2 19:01:52.759678 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:01:52.759685 kernel: DMA32 empty Oct 2 19:01:52.759690 kernel: Normal empty Oct 2 19:01:52.759695 kernel: Movable zone start for each node Oct 2 19:01:52.759701 kernel: Early memory node ranges Oct 2 19:01:52.759706 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 19:01:52.759712 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 19:01:52.759718 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 19:01:52.759724 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 19:01:52.759729 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 19:01:52.759735 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 19:01:52.759740 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 19:01:52.759746 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 19:01:52.759753 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 19:01:52.759759 kernel: psci: probing for conduit method from ACPI. Oct 2 19:01:52.759764 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 19:01:52.759770 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 19:01:52.759775 kernel: psci: Trusted OS migration not required Oct 2 19:01:52.759784 kernel: psci: SMC Calling Convention v1.1 Oct 2 19:01:52.759790 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 19:01:52.759797 kernel: ACPI: SRAT not present Oct 2 19:01:52.759803 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 19:01:52.759809 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 19:01:52.759816 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 19:01:52.759821 kernel: Detected PIPT I-cache on CPU0 Oct 2 19:01:52.759827 kernel: CPU features: detected: GIC system register CPU interface Oct 2 19:01:52.759833 kernel: CPU features: detected: Hardware dirty bit management Oct 2 19:01:52.759839 kernel: CPU features: detected: Spectre-v4 Oct 2 19:01:52.759845 kernel: CPU features: detected: Spectre-BHB Oct 2 19:01:52.759853 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 19:01:52.759859 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 19:01:52.759865 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 19:01:52.759876 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 19:01:52.759883 kernel: Policy zone: DMA Oct 2 19:01:52.759890 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:52.759899 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:01:52.759905 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:01:52.759912 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:01:52.759918 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:01:52.759924 kernel: Memory: 2459272K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113016K reserved, 0K cma-reserved) Oct 2 19:01:52.759932 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:01:52.759938 kernel: trace event string verifier disabled Oct 2 19:01:52.759944 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 19:01:52.759950 kernel: rcu: RCU event tracing is enabled. Oct 2 19:01:52.759957 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:01:52.759963 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 19:01:52.759969 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:01:52.759975 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:01:52.759984 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:01:52.759991 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 19:01:52.759997 kernel: GICv3: 256 SPIs implemented Oct 2 19:01:52.760004 kernel: GICv3: 0 Extended SPIs implemented Oct 2 19:01:52.760010 kernel: GICv3: Distributor has no Range Selector support Oct 2 19:01:52.760043 kernel: Root IRQ handler: gic_handle_irq Oct 2 19:01:52.760051 kernel: GICv3: 16 PPIs implemented Oct 2 19:01:52.760057 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 19:01:52.760063 kernel: ACPI: SRAT not present Oct 2 19:01:52.760069 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 19:01:52.760075 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 19:01:52.760081 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 19:01:52.760087 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 19:01:52.760093 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 19:01:52.760100 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:01:52.760107 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 19:01:52.760113 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 19:01:52.760119 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 19:01:52.760125 kernel: arm-pv: using stolen time PV Oct 2 19:01:52.760132 kernel: Console: colour dummy device 80x25 Oct 2 19:01:52.760138 kernel: ACPI: Core revision 20210730 Oct 2 19:01:52.760144 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 19:01:52.760151 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:01:52.760157 kernel: LSM: Security Framework initializing Oct 2 19:01:52.760163 kernel: SELinux: Initializing. Oct 2 19:01:52.760171 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:52.760177 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:01:52.760183 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:01:52.760189 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 19:01:52.760195 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 19:01:52.760202 kernel: Remapping and enabling EFI services. Oct 2 19:01:52.760208 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:01:52.760215 kernel: Detected PIPT I-cache on CPU1 Oct 2 19:01:52.760221 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 19:01:52.760229 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 19:01:52.760235 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:01:52.760241 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 19:01:52.760248 kernel: Detected PIPT I-cache on CPU2 Oct 2 19:01:52.760254 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 19:01:52.760261 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 19:01:52.760267 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:01:52.760273 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 19:01:52.760280 kernel: Detected PIPT I-cache on CPU3 Oct 2 19:01:52.760286 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 19:01:52.760293 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 19:01:52.760300 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 19:01:52.760306 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 19:01:52.760312 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:01:52.760323 kernel: SMP: Total of 4 processors activated. Oct 2 19:01:52.760330 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 19:01:52.760337 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 19:01:52.760344 kernel: CPU features: detected: Common not Private translations Oct 2 19:01:52.760350 kernel: CPU features: detected: CRC32 instructions Oct 2 19:01:52.760357 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 19:01:52.760363 kernel: CPU features: detected: LSE atomic instructions Oct 2 19:01:52.760369 kernel: CPU features: detected: Privileged Access Never Oct 2 19:01:52.760383 kernel: CPU features: detected: RAS Extension Support Oct 2 19:01:52.760391 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 19:01:52.760398 kernel: CPU: All CPU(s) started at EL1 Oct 2 19:01:52.760404 kernel: alternatives: patching kernel code Oct 2 19:01:52.760412 kernel: devtmpfs: initialized Oct 2 19:01:52.760419 kernel: KASLR enabled Oct 2 19:01:52.760425 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:01:52.760432 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:01:52.760439 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:01:52.760445 kernel: SMBIOS 3.0.0 present. Oct 2 19:01:52.760451 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 19:01:52.760458 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:01:52.760464 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 19:01:52.760471 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 19:01:52.760479 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 19:01:52.760486 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:01:52.760492 kernel: audit: type=2000 audit(0.030:1): state=initialized audit_enabled=0 res=1 Oct 2 19:01:52.760499 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:01:52.760506 kernel: cpuidle: using governor menu Oct 2 19:01:52.760512 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 19:01:52.760519 kernel: ASID allocator initialised with 32768 entries Oct 2 19:01:52.760525 kernel: ACPI: bus type PCI registered Oct 2 19:01:52.760532 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:01:52.760539 kernel: Serial: AMBA PL011 UART driver Oct 2 19:01:52.760546 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:01:52.760552 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 19:01:52.760559 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:01:52.760565 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 19:01:52.760572 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:01:52.760579 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 19:01:52.760585 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:01:52.760592 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:01:52.760600 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:01:52.760606 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:01:52.760613 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:01:52.760620 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:01:52.760626 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:01:52.760633 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:01:52.760639 kernel: ACPI: Interpreter enabled Oct 2 19:01:52.760646 kernel: ACPI: Using GIC for interrupt routing Oct 2 19:01:52.760653 kernel: ACPI: MCFG table detected, 1 entries Oct 2 19:01:52.760661 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 19:01:52.760668 kernel: printk: console [ttyAMA0] enabled Oct 2 19:01:52.760675 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:01:52.760811 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:01:52.760894 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 19:01:52.760961 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 19:01:52.761033 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 19:01:52.761099 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 19:01:52.761107 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 19:01:52.761114 kernel: PCI host bridge to bus 0000:00 Oct 2 19:01:52.761182 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 19:01:52.761259 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 19:01:52.761313 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 19:01:52.761365 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:01:52.761452 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 19:01:52.761524 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:01:52.761584 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 19:01:52.761644 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 19:01:52.761703 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:01:52.761761 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 19:01:52.761821 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 19:01:52.761884 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 19:01:52.761937 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 19:01:52.761988 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 19:01:52.762051 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 19:01:52.762061 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 19:01:52.762068 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 19:01:52.762075 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 19:01:52.762083 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 19:01:52.762090 kernel: iommu: Default domain type: Translated Oct 2 19:01:52.762096 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 19:01:52.762103 kernel: vgaarb: loaded Oct 2 19:01:52.762109 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:01:52.762117 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:01:52.762123 kernel: PTP clock support registered Oct 2 19:01:52.762130 kernel: Registered efivars operations Oct 2 19:01:52.762136 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 19:01:52.762143 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:01:52.762151 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:01:52.762158 kernel: pnp: PnP ACPI init Oct 2 19:01:52.762221 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 19:01:52.762231 kernel: pnp: PnP ACPI: found 1 devices Oct 2 19:01:52.762237 kernel: NET: Registered PF_INET protocol family Oct 2 19:01:52.762244 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:01:52.762251 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:01:52.762258 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:01:52.762266 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:01:52.762273 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:01:52.762280 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:01:52.762287 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:52.762293 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:01:52.762300 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:01:52.762306 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:01:52.762313 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 19:01:52.762321 kernel: kvm [1]: HYP mode not available Oct 2 19:01:52.762327 kernel: Initialise system trusted keyrings Oct 2 19:01:52.762334 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:01:52.762340 kernel: Key type asymmetric registered Oct 2 19:01:52.762347 kernel: Asymmetric key parser 'x509' registered Oct 2 19:01:52.762354 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:01:52.762360 kernel: io scheduler mq-deadline registered Oct 2 19:01:52.762367 kernel: io scheduler kyber registered Oct 2 19:01:52.762373 kernel: io scheduler bfq registered Oct 2 19:01:52.762389 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 19:01:52.762398 kernel: ACPI: button: Power Button [PWRB] Oct 2 19:01:52.762405 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 19:01:52.762470 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 19:01:52.762479 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:01:52.762486 kernel: thunder_xcv, ver 1.0 Oct 2 19:01:52.762492 kernel: thunder_bgx, ver 1.0 Oct 2 19:01:52.762499 kernel: nicpf, ver 1.0 Oct 2 19:01:52.762505 kernel: nicvf, ver 1.0 Oct 2 19:01:52.762573 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 19:01:52.762632 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T19:01:52 UTC (1696273312) Oct 2 19:01:52.762640 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:01:52.762647 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:01:52.762654 kernel: Segment Routing with IPv6 Oct 2 19:01:52.762660 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:01:52.762667 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:01:52.762674 kernel: Key type dns_resolver registered Oct 2 19:01:52.762680 kernel: registered taskstats version 1 Oct 2 19:01:52.762689 kernel: Loading compiled-in X.509 certificates Oct 2 19:01:52.762695 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 19:01:52.762702 kernel: Key type .fscrypt registered Oct 2 19:01:52.762709 kernel: Key type fscrypt-provisioning registered Oct 2 19:01:52.762715 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:01:52.762722 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:01:52.762728 kernel: ima: No architecture policies found Oct 2 19:01:52.762735 kernel: Freeing unused kernel memory: 34560K Oct 2 19:01:52.762741 kernel: Run /init as init process Oct 2 19:01:52.762749 kernel: with arguments: Oct 2 19:01:52.762755 kernel: /init Oct 2 19:01:52.762761 kernel: with environment: Oct 2 19:01:52.762768 kernel: HOME=/ Oct 2 19:01:52.762774 kernel: TERM=linux Oct 2 19:01:52.762781 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:01:52.762789 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:01:52.762798 systemd[1]: Detected virtualization kvm. Oct 2 19:01:52.762806 systemd[1]: Detected architecture arm64. Oct 2 19:01:52.762813 systemd[1]: Running in initrd. Oct 2 19:01:52.762820 systemd[1]: No hostname configured, using default hostname. Oct 2 19:01:52.762827 systemd[1]: Hostname set to . Oct 2 19:01:52.762857 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:01:52.762864 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:01:52.762871 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:01:52.762878 systemd[1]: Reached target cryptsetup.target. Oct 2 19:01:52.762888 systemd[1]: Reached target paths.target. Oct 2 19:01:52.762895 systemd[1]: Reached target slices.target. Oct 2 19:01:52.762903 systemd[1]: Reached target swap.target. Oct 2 19:01:52.762910 systemd[1]: Reached target timers.target. Oct 2 19:01:52.762918 systemd[1]: Listening on iscsid.socket. Oct 2 19:01:52.762925 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:01:52.762932 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:01:52.762940 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:01:52.762948 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:01:52.762955 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:01:52.762962 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:01:52.762969 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:01:52.762976 systemd[1]: Reached target sockets.target. Oct 2 19:01:52.762982 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:01:52.762989 systemd[1]: Finished network-cleanup.service. Oct 2 19:01:52.762997 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:01:52.763005 systemd[1]: Starting systemd-journald.service... Oct 2 19:01:52.763012 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:01:52.763049 systemd[1]: Starting systemd-resolved.service... Oct 2 19:01:52.763056 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:01:52.763063 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:01:52.763070 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:01:52.763077 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:01:52.763084 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:01:52.763092 kernel: audit: type=1130 audit(1696273312.759:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.763100 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:01:52.763114 systemd-journald[289]: Journal started Oct 2 19:01:52.763158 systemd-journald[289]: Runtime Journal (/run/log/journal/8c03e752916744fab60af756b3354d2c) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:01:52.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.758771 systemd-modules-load[290]: Inserted module 'overlay' Oct 2 19:01:52.766691 systemd[1]: Started systemd-journald.service. Oct 2 19:01:52.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.770040 kernel: audit: type=1130 audit(1696273312.766:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.779116 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:01:52.779143 kernel: audit: type=1130 audit(1696273312.778:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.776528 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:01:52.782486 kernel: Bridge firewalling registered Oct 2 19:01:52.778714 systemd-resolved[291]: Positive Trust Anchors: Oct 2 19:01:52.778721 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:01:52.778751 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:01:52.782992 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 2 19:01:52.783796 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 2 19:01:52.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.787188 systemd[1]: Started systemd-resolved.service. Oct 2 19:01:52.797213 kernel: audit: type=1130 audit(1696273312.791:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.791759 systemd[1]: Reached target nss-lookup.target. Oct 2 19:01:52.797374 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:01:52.802488 kernel: SCSI subsystem initialized Oct 2 19:01:52.802506 kernel: audit: type=1130 audit(1696273312.799:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.802508 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:01:52.808009 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:01:52.808054 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:01:52.808066 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:01:52.810331 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 2 19:01:52.811618 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:01:52.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.813257 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:01:52.817802 kernel: audit: type=1130 audit(1696273312.812:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.818502 dracut-cmdline[309]: dracut-dracut-053 Oct 2 19:01:52.821259 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 19:01:52.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.825918 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:01:52.830367 kernel: audit: type=1130 audit(1696273312.826:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.897041 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:01:52.905041 kernel: iscsi: registered transport (tcp) Oct 2 19:01:52.919045 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:01:52.919068 kernel: QLogic iSCSI HBA Driver Oct 2 19:01:52.963248 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:01:52.968107 kernel: audit: type=1130 audit(1696273312.964:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:52.964869 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:01:53.011052 kernel: raid6: neonx8 gen() 13814 MB/s Oct 2 19:01:53.028066 kernel: raid6: neonx8 xor() 10822 MB/s Oct 2 19:01:53.045067 kernel: raid6: neonx4 gen() 13539 MB/s Oct 2 19:01:53.062064 kernel: raid6: neonx4 xor() 11307 MB/s Oct 2 19:01:53.079053 kernel: raid6: neonx2 gen() 12955 MB/s Oct 2 19:01:53.096060 kernel: raid6: neonx2 xor() 10203 MB/s Oct 2 19:01:53.113051 kernel: raid6: neonx1 gen() 10489 MB/s Oct 2 19:01:53.130054 kernel: raid6: neonx1 xor() 8759 MB/s Oct 2 19:01:53.147056 kernel: raid6: int64x8 gen() 6287 MB/s Oct 2 19:01:53.164050 kernel: raid6: int64x8 xor() 3547 MB/s Oct 2 19:01:53.181044 kernel: raid6: int64x4 gen() 7236 MB/s Oct 2 19:01:53.198047 kernel: raid6: int64x4 xor() 3851 MB/s Oct 2 19:01:53.215065 kernel: raid6: int64x2 gen() 6146 MB/s Oct 2 19:01:53.232043 kernel: raid6: int64x2 xor() 3318 MB/s Oct 2 19:01:53.249049 kernel: raid6: int64x1 gen() 5040 MB/s Oct 2 19:01:53.266145 kernel: raid6: int64x1 xor() 2643 MB/s Oct 2 19:01:53.266176 kernel: raid6: using algorithm neonx8 gen() 13814 MB/s Oct 2 19:01:53.266186 kernel: raid6: .... xor() 10822 MB/s, rmw enabled Oct 2 19:01:53.267202 kernel: raid6: using neon recovery algorithm Oct 2 19:01:53.279237 kernel: xor: measuring software checksum speed Oct 2 19:01:53.279262 kernel: 8regs : 17297 MB/sec Oct 2 19:01:53.280213 kernel: 32regs : 20749 MB/sec Oct 2 19:01:53.281073 kernel: arm64_neon : 27816 MB/sec Oct 2 19:01:53.281098 kernel: xor: using function: arm64_neon (27816 MB/sec) Oct 2 19:01:53.339049 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 19:01:53.352711 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:01:53.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:53.354772 systemd[1]: Starting systemd-udevd.service... Oct 2 19:01:53.360700 kernel: audit: type=1130 audit(1696273313.353:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:53.354000 audit: BPF prog-id=7 op=LOAD Oct 2 19:01:53.354000 audit: BPF prog-id=8 op=LOAD Oct 2 19:01:53.368603 systemd-udevd[492]: Using default interface naming scheme 'v252'. Oct 2 19:01:53.371884 systemd[1]: Started systemd-udevd.service. Oct 2 19:01:53.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:53.375565 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:01:53.388302 dracut-pre-trigger[507]: rd.md=0: removing MD RAID activation Oct 2 19:01:53.420424 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:01:53.421977 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:01:53.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:53.463108 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:01:53.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:53.491448 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:01:53.503045 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:01:53.518042 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (553) Oct 2 19:01:53.519662 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:01:53.528424 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:01:53.531283 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:01:53.532401 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:01:53.536652 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:01:53.538298 systemd[1]: Starting disk-uuid.service... Oct 2 19:01:53.553028 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:01:54.570836 disk-uuid[564]: The operation has completed successfully. Oct 2 19:01:54.571940 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:01:54.604407 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:01:54.605582 systemd[1]: Finished disk-uuid.service. Oct 2 19:01:54.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.608064 systemd[1]: Starting verity-setup.service... Oct 2 19:01:54.633056 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 19:01:54.659843 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:01:54.661453 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:01:54.662419 systemd[1]: Finished verity-setup.service. Oct 2 19:01:54.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.719042 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:01:54.724967 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:01:54.725837 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:01:54.726575 systemd[1]: Starting ignition-setup.service... Oct 2 19:01:54.735105 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:01:54.739548 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:54.739578 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:01:54.739588 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:01:54.750857 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:01:54.759848 systemd[1]: Finished ignition-setup.service. Oct 2 19:01:54.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.761550 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:01:54.850629 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:01:54.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.857000 audit: BPF prog-id=9 op=LOAD Oct 2 19:01:54.857747 systemd[1]: Starting systemd-networkd.service... Oct 2 19:01:54.880238 systemd-networkd[740]: lo: Link UP Oct 2 19:01:54.880243 systemd-networkd[740]: lo: Gained carrier Oct 2 19:01:54.880623 systemd-networkd[740]: Enumeration completed Oct 2 19:01:54.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.880744 systemd[1]: Started systemd-networkd.service. Oct 2 19:01:54.880819 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:01:54.882492 systemd[1]: Reached target network.target. Oct 2 19:01:54.882703 systemd-networkd[740]: eth0: Link UP Oct 2 19:01:54.882707 systemd-networkd[740]: eth0: Gained carrier Oct 2 19:01:54.884471 systemd[1]: Starting iscsiuio.service... Oct 2 19:01:54.894959 systemd[1]: Started iscsiuio.service. Oct 2 19:01:54.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.897492 systemd[1]: Starting iscsid.service... Oct 2 19:01:54.902389 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:54.902389 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:01:54.902389 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:01:54.902389 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:01:54.902389 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:01:54.902389 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:01:54.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.908774 systemd[1]: Started iscsid.service. Oct 2 19:01:54.909101 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.86/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:01:54.911957 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:01:54.921924 ignition[640]: Ignition 2.14.0 Oct 2 19:01:54.921935 ignition[640]: Stage: fetch-offline Oct 2 19:01:54.921987 ignition[640]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:54.921997 ignition[640]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:54.922151 ignition[640]: parsed url from cmdline: "" Oct 2 19:01:54.925162 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:01:54.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.922155 ignition[640]: no config URL provided Oct 2 19:01:54.926254 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:01:54.922160 ignition[640]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:01:54.927672 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:01:54.922171 ignition[640]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:01:54.929012 systemd[1]: Reached target remote-fs.target. Oct 2 19:01:54.922189 ignition[640]: op(1): [started] loading QEMU firmware config module Oct 2 19:01:54.931339 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:01:54.922194 ignition[640]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:01:54.934763 ignition[640]: op(1): [finished] loading QEMU firmware config module Oct 2 19:01:54.940425 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:01:54.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:54.975572 ignition[640]: parsing config with SHA512: a2d3f5d0dcf4ca694ddb599b919119305454af429ca7c6e764e6031c8a91b0063251125bbcab6b2f31f394062cb18d498b73f7b657b16672b527e2d737109975 Oct 2 19:01:55.001673 unknown[640]: fetched base config from "system" Oct 2 19:01:55.001686 unknown[640]: fetched user config from "qemu" Oct 2 19:01:55.002193 ignition[640]: fetch-offline: fetch-offline passed Oct 2 19:01:55.002259 ignition[640]: Ignition finished successfully Oct 2 19:01:55.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.004107 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:01:55.005147 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:01:55.018544 systemd[1]: Starting ignition-kargs.service... Oct 2 19:01:55.037379 ignition[762]: Ignition 2.14.0 Oct 2 19:01:55.037389 ignition[762]: Stage: kargs Oct 2 19:01:55.037494 ignition[762]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:55.039716 systemd[1]: Finished ignition-kargs.service. Oct 2 19:01:55.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.037503 ignition[762]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:55.038530 ignition[762]: kargs: kargs passed Oct 2 19:01:55.044173 systemd[1]: Starting ignition-disks.service... Oct 2 19:01:55.038581 ignition[762]: Ignition finished successfully Oct 2 19:01:55.052415 ignition[768]: Ignition 2.14.0 Oct 2 19:01:55.052424 ignition[768]: Stage: disks Oct 2 19:01:55.052519 ignition[768]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:55.052528 ignition[768]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:55.053439 ignition[768]: disks: disks passed Oct 2 19:01:55.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.055324 systemd[1]: Finished ignition-disks.service. Oct 2 19:01:55.053485 ignition[768]: Ignition finished successfully Oct 2 19:01:55.057106 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:01:55.058385 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:01:55.059751 systemd[1]: Reached target local-fs.target. Oct 2 19:01:55.061070 systemd[1]: Reached target sysinit.target. Oct 2 19:01:55.062646 systemd[1]: Reached target basic.target. Oct 2 19:01:55.064910 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:01:55.080468 systemd-fsck[776]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 19:01:55.083607 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:01:55.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.098473 systemd[1]: Mounting sysroot.mount... Oct 2 19:01:55.110042 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:01:55.110140 systemd[1]: Mounted sysroot.mount. Oct 2 19:01:55.110924 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:01:55.114406 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:01:55.115309 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:01:55.115350 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:01:55.115388 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:01:55.117823 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:01:55.120680 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:01:55.126272 initrd-setup-root[786]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:01:55.131558 initrd-setup-root[794]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:01:55.136411 initrd-setup-root[802]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:01:55.141607 initrd-setup-root[810]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:01:55.188885 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:01:55.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.191001 systemd[1]: Starting ignition-mount.service... Oct 2 19:01:55.192543 systemd[1]: Starting sysroot-boot.service... Oct 2 19:01:55.198669 bash[827]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 19:01:55.210587 ignition[829]: INFO : Ignition 2.14.0 Oct 2 19:01:55.210587 ignition[829]: INFO : Stage: mount Oct 2 19:01:55.212960 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:55.212960 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:55.212960 ignition[829]: INFO : mount: mount passed Oct 2 19:01:55.212960 ignition[829]: INFO : Ignition finished successfully Oct 2 19:01:55.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.213111 systemd[1]: Finished ignition-mount.service. Oct 2 19:01:55.219061 systemd[1]: Finished sysroot-boot.service. Oct 2 19:01:55.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:55.673460 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:01:55.692464 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (838) Oct 2 19:01:55.694600 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 19:01:55.694618 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:01:55.694628 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:01:55.711699 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:01:55.714310 systemd[1]: Starting ignition-files.service... Oct 2 19:01:55.735990 ignition[858]: INFO : Ignition 2.14.0 Oct 2 19:01:55.735990 ignition[858]: INFO : Stage: files Oct 2 19:01:55.737732 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:55.737732 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:55.737732 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:01:55.743630 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:01:55.743630 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:01:55.752864 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:01:55.754255 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:01:55.756729 unknown[858]: wrote ssh authorized keys file for user: core Oct 2 19:01:55.758080 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:01:55.758080 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:01:55.758080 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 19:01:56.015601 systemd-networkd[740]: eth0: Gained IPv6LL Oct 2 19:01:56.039588 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:01:56.241001 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 19:01:56.243992 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 19:01:56.243992 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:01:56.243992 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:56.385727 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:01:56.507727 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 19:01:56.507727 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 19:01:56.513057 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:56.513057 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 19:01:56.551209 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:01:57.040742 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 19:01:57.043775 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:01:57.043775 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:57.043775 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 19:01:57.087281 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:01:58.189510 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 19:01:58.192808 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:01:58.192808 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:58.192808 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 19:01:58.237461 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:01:58.552815 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 19:01:58.552815 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:01:58.557294 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:58.557294 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:01:58.557294 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:58.557294 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 19:01:58.753780 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:01:58.948134 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:01:58.948134 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:58.952418 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:01:58.952418 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:58.952418 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:01:58.952418 ignition[858]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:58.984976 ignition[858]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:01:58.984976 ignition[858]: INFO : files: op(14): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:01:58.984976 ignition[858]: INFO : files: op(14): op(15): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:01:58.993564 ignition[858]: INFO : files: op(14): op(15): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:01:58.996158 ignition[858]: INFO : files: op(14): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:01:58.996158 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:58.996158 ignition[858]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:01:58.996158 ignition[858]: INFO : files: files passed Oct 2 19:01:58.996158 ignition[858]: INFO : Ignition finished successfully Oct 2 19:01:59.008115 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:01:59.008137 kernel: audit: type=1130 audit(1696273318.998:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:58.996347 systemd[1]: Finished ignition-files.service. Oct 2 19:01:58.999575 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:01:59.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.004232 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:01:59.020622 kernel: audit: type=1130 audit(1696273319.008:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.020646 kernel: audit: type=1130 audit(1696273319.017:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.020656 kernel: audit: type=1131 audit(1696273319.017:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.020723 initrd-setup-root-after-ignition[881]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:01:59.005010 systemd[1]: Starting ignition-quench.service... Oct 2 19:01:59.025335 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:01:59.007985 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:01:59.009090 systemd[1]: Reached target ignition-complete.target. Oct 2 19:01:59.013930 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:01:59.015299 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:01:59.015400 systemd[1]: Finished ignition-quench.service. Oct 2 19:01:59.034511 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:01:59.034615 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:01:59.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.036436 systemd[1]: Reached target initrd-fs.target. Oct 2 19:01:59.043174 kernel: audit: type=1130 audit(1696273319.036:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.043198 kernel: audit: type=1131 audit(1696273319.036:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.042534 systemd[1]: Reached target initrd.target. Oct 2 19:01:59.043899 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:01:59.044748 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:01:59.057775 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:01:59.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.059495 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:01:59.063153 kernel: audit: type=1130 audit(1696273319.058:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.068598 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:01:59.069497 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:01:59.070960 systemd[1]: Stopped target timers.target. Oct 2 19:01:59.072346 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:01:59.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.072462 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:01:59.078082 kernel: audit: type=1131 audit(1696273319.073:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.073784 systemd[1]: Stopped target initrd.target. Oct 2 19:01:59.077525 systemd[1]: Stopped target basic.target. Oct 2 19:01:59.078786 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:01:59.080142 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:01:59.081489 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:01:59.082942 systemd[1]: Stopped target remote-fs.target. Oct 2 19:01:59.084326 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:01:59.085771 systemd[1]: Stopped target sysinit.target. Oct 2 19:01:59.087069 systemd[1]: Stopped target local-fs.target. Oct 2 19:01:59.088414 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:01:59.089729 systemd[1]: Stopped target swap.target. Oct 2 19:01:59.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.090987 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:01:59.096860 kernel: audit: type=1131 audit(1696273319.092:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.091125 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:01:59.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.092517 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:01:59.101985 kernel: audit: type=1131 audit(1696273319.097:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.096057 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:01:59.096169 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:01:59.097732 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:01:59.097827 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:01:59.101528 systemd[1]: Stopped target paths.target. Oct 2 19:01:59.102734 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:01:59.106078 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:01:59.106975 systemd[1]: Stopped target slices.target. Oct 2 19:01:59.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.108222 systemd[1]: Stopped target sockets.target. Oct 2 19:01:59.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.109782 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:01:59.109889 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:01:59.115807 iscsid[745]: iscsid shutting down. Oct 2 19:01:59.111416 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:01:59.111502 systemd[1]: Stopped ignition-files.service. Oct 2 19:01:59.113560 systemd[1]: Stopping ignition-mount.service... Oct 2 19:01:59.116143 systemd[1]: Stopping iscsid.service... Oct 2 19:01:59.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.117122 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:01:59.117236 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:01:59.119436 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:01:59.120596 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:01:59.120735 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:01:59.122144 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:01:59.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.130521 ignition[898]: INFO : Ignition 2.14.0 Oct 2 19:01:59.130521 ignition[898]: INFO : Stage: umount Oct 2 19:01:59.130521 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:01:59.130521 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:01:59.130521 ignition[898]: INFO : umount: umount passed Oct 2 19:01:59.130521 ignition[898]: INFO : Ignition finished successfully Oct 2 19:01:59.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.122234 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:01:59.125231 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:01:59.125336 systemd[1]: Stopped iscsid.service. Oct 2 19:01:59.127225 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:01:59.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.127390 systemd[1]: Closed iscsid.socket. Oct 2 19:01:59.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.128229 systemd[1]: Stopping iscsiuio.service... Oct 2 19:01:59.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.131241 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:01:59.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.131325 systemd[1]: Stopped iscsiuio.service. Oct 2 19:01:59.133609 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:01:59.134044 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:01:59.134125 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:01:59.135293 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:01:59.135374 systemd[1]: Stopped ignition-mount.service. Oct 2 19:01:59.137006 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:01:59.137152 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:01:59.139302 systemd[1]: Stopped target network.target. Oct 2 19:01:59.140480 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:01:59.140515 systemd[1]: Closed iscsiuio.socket. Oct 2 19:01:59.141781 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:01:59.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.141831 systemd[1]: Stopped ignition-disks.service. Oct 2 19:01:59.142991 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:01:59.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.143047 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:01:59.144400 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:01:59.144437 systemd[1]: Stopped ignition-setup.service. Oct 2 19:01:59.145736 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:01:59.168000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:01:59.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.145777 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:01:59.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.147221 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:01:59.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.148781 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:01:59.159289 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:01:59.159391 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:01:59.161379 systemd-networkd[740]: eth0: DHCPv6 lease lost Oct 2 19:01:59.162403 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:01:59.178000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:01:59.162492 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:01:59.163946 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:01:59.163974 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:01:59.166094 systemd[1]: Stopping network-cleanup.service... Oct 2 19:01:59.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.167610 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:01:59.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.167669 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:01:59.169221 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:01:59.169267 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:01:59.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.171502 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:01:59.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.171547 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:01:59.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.174593 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:01:59.176950 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:01:59.182210 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:01:59.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.182391 systemd[1]: Stopped network-cleanup.service. Oct 2 19:01:59.184051 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:01:59.184176 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:01:59.185445 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:01:59.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.185480 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:01:59.186866 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:01:59.186900 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:01:59.188285 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:01:59.188334 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:01:59.189948 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:01:59.189990 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:01:59.191388 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:01:59.191429 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:01:59.193721 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:01:59.195154 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:01:59.195211 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:01:59.199949 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:01:59.200046 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:01:59.201313 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:01:59.203594 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:01:59.212848 systemd[1]: Switching root. Oct 2 19:01:59.226423 systemd-journald[289]: Journal stopped Oct 2 19:02:01.355751 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 2 19:02:01.355859 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:02:01.355874 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:02:01.355884 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:02:01.355894 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:02:01.355903 kernel: SELinux: policy capability open_perms=1 Oct 2 19:02:01.355915 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:02:01.355925 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:02:01.355934 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:02:01.355943 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:02:01.355953 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:02:01.355963 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:02:01.355973 systemd[1]: Successfully loaded SELinux policy in 33.908ms. Oct 2 19:02:01.355995 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.190ms. Oct 2 19:02:01.356006 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:02:01.356034 systemd[1]: Detected virtualization kvm. Oct 2 19:02:01.356045 systemd[1]: Detected architecture arm64. Oct 2 19:02:01.356055 systemd[1]: Detected first boot. Oct 2 19:02:01.356067 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:02:01.356077 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:02:01.356087 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:01.356099 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:01.356111 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:01.356132 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:02:01.356142 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:02:01.356154 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:02:01.356165 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:02:01.356176 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:02:01.356187 systemd[1]: Created slice system-getty.slice. Oct 2 19:02:01.356206 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:02:01.356217 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:02:01.356227 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:02:01.356239 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:02:01.356250 systemd[1]: Created slice user.slice. Oct 2 19:02:01.356260 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:02:01.356270 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:02:01.356280 systemd[1]: Set up automount boot.automount. Oct 2 19:02:01.356291 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:02:01.356301 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:02:01.356311 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:02:01.356321 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:02:01.356333 systemd[1]: Reached target integritysetup.target. Oct 2 19:02:01.356348 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:02:01.356363 systemd[1]: Reached target remote-fs.target. Oct 2 19:02:01.356374 systemd[1]: Reached target slices.target. Oct 2 19:02:01.356386 systemd[1]: Reached target swap.target. Oct 2 19:02:01.356397 systemd[1]: Reached target torcx.target. Oct 2 19:02:01.356408 systemd[1]: Reached target veritysetup.target. Oct 2 19:02:01.356419 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:02:01.356429 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:02:01.356440 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:02:01.356452 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:02:01.356462 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:02:01.356473 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:02:01.356483 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:02:01.356493 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:02:01.356502 systemd[1]: Mounting media.mount... Oct 2 19:02:01.356522 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:02:01.356533 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:02:01.356543 systemd[1]: Mounting tmp.mount... Oct 2 19:02:01.356555 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:02:01.356566 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:02:01.356576 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:02:01.356587 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:02:01.356597 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:02:01.356607 systemd[1]: Starting modprobe@drm.service... Oct 2 19:02:01.356617 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:02:01.356627 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:02:01.356638 systemd[1]: Starting modprobe@loop.service... Oct 2 19:02:01.356650 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:02:01.356660 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:02:01.356671 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:02:01.356681 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:02:01.356691 kernel: loop: module loaded Oct 2 19:02:01.356701 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:02:01.356711 systemd[1]: Stopped systemd-journald.service. Oct 2 19:02:01.356721 kernel: fuse: init (API version 7.34) Oct 2 19:02:01.356731 systemd[1]: Starting systemd-journald.service... Oct 2 19:02:01.356743 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:02:01.356754 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:02:01.356765 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:02:01.356775 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:02:01.356785 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:02:01.356796 systemd[1]: Stopped verity-setup.service. Oct 2 19:02:01.356806 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:02:01.356816 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:02:01.356826 systemd[1]: Mounted media.mount. Oct 2 19:02:01.356837 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:02:01.356847 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:02:01.356857 systemd[1]: Mounted tmp.mount. Oct 2 19:02:01.356871 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:02:01.356881 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:02:01.356892 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:02:01.356904 systemd-journald[1001]: Journal started Oct 2 19:02:01.356945 systemd-journald[1001]: Runtime Journal (/run/log/journal/8c03e752916744fab60af756b3354d2c) is 6.0M, max 48.7M, 42.6M free. Oct 2 19:01:59.290000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:01:59.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:59.460000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:01:59.460000 audit: BPF prog-id=10 op=LOAD Oct 2 19:01:59.460000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:01:59.460000 audit: BPF prog-id=11 op=LOAD Oct 2 19:01:59.460000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:02:01.223000 audit: BPF prog-id=12 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:02:01.224000 audit: BPF prog-id=13 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=14 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:02:01.224000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:02:01.224000 audit: BPF prog-id=15 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:02:01.224000 audit: BPF prog-id=16 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=17 op=LOAD Oct 2 19:02:01.224000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:02:01.224000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:02:01.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.237000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:02:01.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.325000 audit: BPF prog-id=18 op=LOAD Oct 2 19:02:01.325000 audit: BPF prog-id=19 op=LOAD Oct 2 19:02:01.325000 audit: BPF prog-id=20 op=LOAD Oct 2 19:02:01.325000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:02:01.325000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:02:01.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.354000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:02:01.354000 audit[1001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffff492c7b0 a2=4000 a3=1 items=0 ppid=1 pid=1001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:01.354000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:02:01.222089 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:01:59.504788 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:01.222101 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:01:59.505435 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:02:01.225147 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:01:59.505454 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:59.505486 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:01:59.505495 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:01:59.505526 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:01:59.505538 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:02:01.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:01:59.505733 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:01:59.505765 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:01:59.505777 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:01:59.506231 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:01:59.506266 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:01:59.506283 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:01:59.506296 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:01:59.506314 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:01:59.506326 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:01:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:02:00.948564 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:02:00.948820 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:02:00.948912 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:02:01.360041 systemd[1]: Started systemd-journald.service. Oct 2 19:02:00.949083 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:02:00.949132 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:02:01.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:00.949187 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2023-10-02T19:02:00Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:02:01.360637 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:02:01.360805 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:02:01.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.361951 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:02:01.362585 systemd[1]: Finished modprobe@drm.service. Oct 2 19:02:01.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.363712 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:02:01.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.364815 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:02:01.364955 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:02:01.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.366100 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:02:01.366244 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:02:01.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.367339 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:02:01.367511 systemd[1]: Finished modprobe@loop.service. Oct 2 19:02:01.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.368721 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:02:01.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.369907 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:02:01.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.371267 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:02:01.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.372576 systemd[1]: Reached target network-pre.target. Oct 2 19:02:01.374699 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:02:01.376605 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:02:01.377532 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:02:01.379231 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:02:01.381329 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:02:01.382191 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:02:01.383231 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:02:01.384089 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:02:01.385291 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:02:01.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.392392 systemd-journald[1001]: Time spent on flushing to /var/log/journal/8c03e752916744fab60af756b3354d2c is 15.733ms for 994 entries. Oct 2 19:02:01.392392 systemd-journald[1001]: System Journal (/var/log/journal/8c03e752916744fab60af756b3354d2c) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:02:01.430580 systemd-journald[1001]: Received client request to flush runtime journal. Oct 2 19:02:01.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.387236 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:02:01.391084 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:02:01.392179 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:02:01.432035 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:02:01.394245 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:02:01.396779 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:02:01.400943 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:02:01.402112 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:02:01.405148 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:02:01.411729 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:02:01.431642 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:02:01.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.786758 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:02:01.789242 systemd[1]: Starting systemd-udevd.service... Oct 2 19:02:01.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.788000 audit: BPF prog-id=21 op=LOAD Oct 2 19:02:01.788000 audit: BPF prog-id=22 op=LOAD Oct 2 19:02:01.788000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:02:01.788000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:02:01.807797 systemd-udevd[1034]: Using default interface naming scheme 'v252'. Oct 2 19:02:01.819568 systemd[1]: Started systemd-udevd.service. Oct 2 19:02:01.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.821000 audit: BPF prog-id=23 op=LOAD Oct 2 19:02:01.822960 systemd[1]: Starting systemd-networkd.service... Oct 2 19:02:01.830000 audit: BPF prog-id=24 op=LOAD Oct 2 19:02:01.830000 audit: BPF prog-id=25 op=LOAD Oct 2 19:02:01.830000 audit: BPF prog-id=26 op=LOAD Oct 2 19:02:01.831727 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:02:01.849395 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 19:02:01.883230 systemd[1]: Started systemd-userdbd.service. Oct 2 19:02:01.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.893483 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:02:01.927422 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:02:01.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.929656 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:02:01.942521 systemd-networkd[1043]: lo: Link UP Oct 2 19:02:01.942532 systemd-networkd[1043]: lo: Gained carrier Oct 2 19:02:01.942884 systemd-networkd[1043]: Enumeration completed Oct 2 19:02:01.943002 systemd[1]: Started systemd-networkd.service. Oct 2 19:02:01.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.944127 systemd-networkd[1043]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:02:01.946537 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:02:01.949138 systemd-networkd[1043]: eth0: Link UP Oct 2 19:02:01.949149 systemd-networkd[1043]: eth0: Gained carrier Oct 2 19:02:01.966201 systemd-networkd[1043]: eth0: DHCPv4 address 10.0.0.86/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:02:01.977730 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:02:01.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:01.978843 systemd[1]: Reached target cryptsetup.target. Oct 2 19:02:01.980921 systemd[1]: Starting lvm2-activation.service... Oct 2 19:02:01.985222 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:02:02.020066 systemd[1]: Finished lvm2-activation.service. Oct 2 19:02:02.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.021085 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:02:02.021959 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:02:02.021995 systemd[1]: Reached target local-fs.target. Oct 2 19:02:02.022802 systemd[1]: Reached target machines.target. Oct 2 19:02:02.024886 systemd[1]: Starting ldconfig.service... Oct 2 19:02:02.026042 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:02:02.026127 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:02:02.027452 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:02:02.029438 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:02:02.031721 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:02:02.032813 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:02:02.032872 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:02:02.033989 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:02:02.035369 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1070 (bootctl) Oct 2 19:02:02.036540 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:02:02.072218 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:02:02.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.157461 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:02:02.160506 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:02:02.163759 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:02:02.183769 systemd-fsck[1079]: fsck.fat 4.2 (2021-01-31) Oct 2 19:02:02.183769 systemd-fsck[1079]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 19:02:02.186553 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:02:02.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.189520 systemd[1]: Mounting boot.mount... Oct 2 19:02:02.270201 systemd[1]: Mounted boot.mount. Oct 2 19:02:02.278975 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:02:02.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.282256 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:02:02.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.311746 ldconfig[1069]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:02:02.315042 systemd[1]: Finished ldconfig.service. Oct 2 19:02:02.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.340693 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:02:02.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.343104 systemd[1]: Starting audit-rules.service... Oct 2 19:02:02.345196 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:02:02.347403 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:02:02.353000 audit: BPF prog-id=27 op=LOAD Oct 2 19:02:02.354431 systemd[1]: Starting systemd-resolved.service... Oct 2 19:02:02.356000 audit: BPF prog-id=28 op=LOAD Oct 2 19:02:02.357547 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:02:02.359639 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:02:02.361608 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:02:02.362377 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:02:02.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.363661 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:02:02.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.366798 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:02:02.369000 audit[1094]: SYSTEM_BOOT pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.369280 systemd[1]: Starting systemd-update-done.service... Oct 2 19:02:02.377074 systemd[1]: Finished systemd-update-done.service. Oct 2 19:02:02.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.379135 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:02:02.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.406585 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:02:02.407665 systemd-timesyncd[1093]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:02:02.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:02.407964 systemd[1]: Reached target time-set.target. Oct 2 19:02:02.408136 systemd-timesyncd[1093]: Initial clock synchronization to Mon 2023-10-02 19:02:02.148101 UTC. Oct 2 19:02:02.410000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:02:02.410000 audit[1105]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff2677590 a2=420 a3=0 items=0 ppid=1083 pid=1105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:02.410000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:02:02.410849 augenrules[1105]: No rules Oct 2 19:02:02.411783 systemd[1]: Finished audit-rules.service. Oct 2 19:02:02.411911 systemd-resolved[1087]: Positive Trust Anchors: Oct 2 19:02:02.415285 systemd-resolved[1087]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:02:02.415317 systemd-resolved[1087]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:02:02.427051 systemd-resolved[1087]: Defaulting to hostname 'linux'. Oct 2 19:02:02.432059 systemd[1]: Started systemd-resolved.service. Oct 2 19:02:02.432965 systemd[1]: Reached target network.target. Oct 2 19:02:02.433791 systemd[1]: Reached target nss-lookup.target. Oct 2 19:02:02.434637 systemd[1]: Reached target sysinit.target. Oct 2 19:02:02.435560 systemd[1]: Started motdgen.path. Oct 2 19:02:02.436290 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:02:02.437545 systemd[1]: Started logrotate.timer. Oct 2 19:02:02.438406 systemd[1]: Started mdadm.timer. Oct 2 19:02:02.439086 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:02:02.439894 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:02:02.439928 systemd[1]: Reached target paths.target. Oct 2 19:02:02.440747 systemd[1]: Reached target timers.target. Oct 2 19:02:02.441911 systemd[1]: Listening on dbus.socket. Oct 2 19:02:02.443743 systemd[1]: Starting docker.socket... Oct 2 19:02:02.447022 systemd[1]: Listening on sshd.socket. Oct 2 19:02:02.447846 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:02:02.448322 systemd[1]: Listening on docker.socket. Oct 2 19:02:02.449160 systemd[1]: Reached target sockets.target. Oct 2 19:02:02.449925 systemd[1]: Reached target basic.target. Oct 2 19:02:02.450738 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:02:02.450771 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:02:02.451780 systemd[1]: Starting containerd.service... Oct 2 19:02:02.453587 systemd[1]: Starting dbus.service... Oct 2 19:02:02.455217 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:02:02.457133 systemd[1]: Starting extend-filesystems.service... Oct 2 19:02:02.457990 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:02:02.459169 systemd[1]: Starting motdgen.service... Oct 2 19:02:02.460982 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:02:02.462793 systemd[1]: Starting prepare-critools.service... Oct 2 19:02:02.467013 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:02:02.468886 systemd[1]: Starting sshd-keygen.service... Oct 2 19:02:02.469596 jq[1114]: false Oct 2 19:02:02.471706 systemd[1]: Starting systemd-logind.service... Oct 2 19:02:02.473163 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:02:02.476858 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:02:02.478337 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:02:02.479378 systemd[1]: Starting update-engine.service... Oct 2 19:02:02.483941 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:02:02.493926 jq[1133]: true Oct 2 19:02:02.490529 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:02:02.490715 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:02:02.492997 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:02:02.493204 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:02:02.498834 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:02:02.499027 systemd[1]: Finished motdgen.service. Oct 2 19:02:02.509295 jq[1138]: true Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda1 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda2 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda3 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found usr Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda4 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda6 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda7 Oct 2 19:02:02.509445 extend-filesystems[1115]: Found vda9 Oct 2 19:02:02.509445 extend-filesystems[1115]: Checking size of /dev/vda9 Oct 2 19:02:02.530081 tar[1136]: ./ Oct 2 19:02:02.530081 tar[1136]: ./macvlan Oct 2 19:02:02.530305 extend-filesystems[1115]: Old size kept for /dev/vda9 Oct 2 19:02:02.541120 tar[1137]: crictl Oct 2 19:02:02.510569 systemd[1]: Started dbus.service. Oct 2 19:02:02.510393 dbus-daemon[1113]: [system] SELinux support is enabled Oct 2 19:02:02.514310 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:02:02.514358 systemd[1]: Reached target system-config.target. Oct 2 19:02:02.515555 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:02:02.515571 systemd[1]: Reached target user-config.target. Oct 2 19:02:02.529945 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:02:02.530121 systemd[1]: Finished extend-filesystems.service. Oct 2 19:02:02.544123 systemd-logind[1125]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 19:02:02.546562 systemd-logind[1125]: New seat seat0. Oct 2 19:02:02.550031 systemd[1]: Started systemd-logind.service. Oct 2 19:02:02.580166 bash[1166]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:02:02.581260 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:02:02.594360 tar[1136]: ./static Oct 2 19:02:02.600505 update_engine[1129]: I1002 19:02:02.600265 1129 main.cc:92] Flatcar Update Engine starting Oct 2 19:02:02.610099 systemd[1]: Started update-engine.service. Oct 2 19:02:02.610241 update_engine[1129]: I1002 19:02:02.610213 1129 update_check_scheduler.cc:74] Next update check in 6m29s Oct 2 19:02:02.612853 systemd[1]: Started locksmithd.service. Oct 2 19:02:02.624879 tar[1136]: ./vlan Oct 2 19:02:02.626649 env[1139]: time="2023-10-02T19:02:02.626080720Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:02:02.658774 tar[1136]: ./portmap Oct 2 19:02:02.693908 tar[1136]: ./host-local Oct 2 19:02:02.696327 env[1139]: time="2023-10-02T19:02:02.696284480Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:02:02.696482 env[1139]: time="2023-10-02T19:02:02.696461240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.697867 env[1139]: time="2023-10-02T19:02:02.697830840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:02:02.697909 env[1139]: time="2023-10-02T19:02:02.697867960Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.698134 env[1139]: time="2023-10-02T19:02:02.698111560Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:02:02.698167 env[1139]: time="2023-10-02T19:02:02.698133480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.698167 env[1139]: time="2023-10-02T19:02:02.698148240Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:02:02.698167 env[1139]: time="2023-10-02T19:02:02.698157560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.698245 env[1139]: time="2023-10-02T19:02:02.698228120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.698605 env[1139]: time="2023-10-02T19:02:02.698583800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:02:02.699344 env[1139]: time="2023-10-02T19:02:02.699310400Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:02:02.699376 env[1139]: time="2023-10-02T19:02:02.699348080Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:02:02.699441 env[1139]: time="2023-10-02T19:02:02.699421360Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:02:02.699524 env[1139]: time="2023-10-02T19:02:02.699503040Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:02:02.702460 env[1139]: time="2023-10-02T19:02:02.702432040Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:02:02.702503 env[1139]: time="2023-10-02T19:02:02.702466200Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:02:02.702503 env[1139]: time="2023-10-02T19:02:02.702480960Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:02:02.702556 env[1139]: time="2023-10-02T19:02:02.702517720Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702556 env[1139]: time="2023-10-02T19:02:02.702533880Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702599 env[1139]: time="2023-10-02T19:02:02.702554040Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702599 env[1139]: time="2023-10-02T19:02:02.702569240Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702913 env[1139]: time="2023-10-02T19:02:02.702895600Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702941 env[1139]: time="2023-10-02T19:02:02.702917320Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702941 env[1139]: time="2023-10-02T19:02:02.702931360Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702984 env[1139]: time="2023-10-02T19:02:02.702944080Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.702984 env[1139]: time="2023-10-02T19:02:02.702957040Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:02:02.703976 env[1139]: time="2023-10-02T19:02:02.703948680Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:02:02.704435 env[1139]: time="2023-10-02T19:02:02.704409840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:02:02.704932 env[1139]: time="2023-10-02T19:02:02.704911560Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:02:02.704972 env[1139]: time="2023-10-02T19:02:02.704945680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.704972 env[1139]: time="2023-10-02T19:02:02.704960520Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:02:02.705235 env[1139]: time="2023-10-02T19:02:02.705216960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705267 env[1139]: time="2023-10-02T19:02:02.705241200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705267 env[1139]: time="2023-10-02T19:02:02.705255160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705400 env[1139]: time="2023-10-02T19:02:02.705268480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705434 env[1139]: time="2023-10-02T19:02:02.705409160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705434 env[1139]: time="2023-10-02T19:02:02.705428920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705481 env[1139]: time="2023-10-02T19:02:02.705441440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705481 env[1139]: time="2023-10-02T19:02:02.705454040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705481 env[1139]: time="2023-10-02T19:02:02.705467040Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:02:02.705849 env[1139]: time="2023-10-02T19:02:02.705822680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705877 env[1139]: time="2023-10-02T19:02:02.705853280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705877 env[1139]: time="2023-10-02T19:02:02.705868800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.705914 env[1139]: time="2023-10-02T19:02:02.705881120Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:02:02.705964 env[1139]: time="2023-10-02T19:02:02.705944040Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:02:02.706035 env[1139]: time="2023-10-02T19:02:02.706008840Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:02:02.706076 env[1139]: time="2023-10-02T19:02:02.706044360Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:02:02.706154 env[1139]: time="2023-10-02T19:02:02.706133520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:02:02.706637 env[1139]: time="2023-10-02T19:02:02.706578600Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:02:02.709113 env[1139]: time="2023-10-02T19:02:02.706763600Z" level=info msg="Connect containerd service" Oct 2 19:02:02.709113 env[1139]: time="2023-10-02T19:02:02.706802520Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:02:02.709113 env[1139]: time="2023-10-02T19:02:02.708549440Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:02:02.709212 env[1139]: time="2023-10-02T19:02:02.709170320Z" level=info msg="Start subscribing containerd event" Oct 2 19:02:02.709233 env[1139]: time="2023-10-02T19:02:02.709224760Z" level=info msg="Start recovering state" Oct 2 19:02:02.709306 env[1139]: time="2023-10-02T19:02:02.709289840Z" level=info msg="Start event monitor" Oct 2 19:02:02.709335 env[1139]: time="2023-10-02T19:02:02.709324240Z" level=info msg="Start snapshots syncer" Oct 2 19:02:02.709366 env[1139]: time="2023-10-02T19:02:02.709335040Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:02:02.709366 env[1139]: time="2023-10-02T19:02:02.709350640Z" level=info msg="Start streaming server" Oct 2 19:02:02.709462 env[1139]: time="2023-10-02T19:02:02.709437200Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:02:02.709507 env[1139]: time="2023-10-02T19:02:02.709493120Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:02:02.709561 env[1139]: time="2023-10-02T19:02:02.709547440Z" level=info msg="containerd successfully booted in 0.089039s" Oct 2 19:02:02.709630 systemd[1]: Started containerd.service. Oct 2 19:02:02.720577 tar[1136]: ./vrf Oct 2 19:02:02.745001 tar[1136]: ./bridge Oct 2 19:02:02.778046 tar[1136]: ./tuning Oct 2 19:02:02.800903 locksmithd[1167]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:02:02.803804 tar[1136]: ./firewall Oct 2 19:02:02.833268 tar[1136]: ./host-device Oct 2 19:02:02.859411 tar[1136]: ./sbr Oct 2 19:02:02.883302 tar[1136]: ./loopback Oct 2 19:02:02.906375 tar[1136]: ./dhcp Oct 2 19:02:02.928242 systemd[1]: Finished prepare-critools.service. Oct 2 19:02:02.971074 tar[1136]: ./ptp Oct 2 19:02:02.999441 tar[1136]: ./ipvlan Oct 2 19:02:03.026097 tar[1136]: ./bandwidth Oct 2 19:02:03.060731 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:02:03.758120 systemd-networkd[1043]: eth0: Gained IPv6LL Oct 2 19:02:03.880143 sshd_keygen[1134]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:02:03.900372 systemd[1]: Finished sshd-keygen.service. Oct 2 19:02:03.902693 systemd[1]: Starting issuegen.service... Oct 2 19:02:03.908103 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:02:03.908267 systemd[1]: Finished issuegen.service. Oct 2 19:02:03.910769 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:02:03.917654 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:02:03.920262 systemd[1]: Started getty@tty1.service. Oct 2 19:02:03.922510 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 19:02:03.923610 systemd[1]: Reached target getty.target. Oct 2 19:02:03.924592 systemd[1]: Reached target multi-user.target. Oct 2 19:02:03.926797 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:02:03.934388 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:02:03.934554 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:02:03.935638 systemd[1]: Startup finished in 635ms (kernel) + 6.663s (initrd) + 4.686s (userspace) = 11.985s. Oct 2 19:02:05.195124 systemd[1]: Created slice system-sshd.slice. Oct 2 19:02:05.196675 systemd[1]: Started sshd@0-10.0.0.86:22-10.0.0.1:32962.service. Oct 2 19:02:05.243849 sshd[1197]: Accepted publickey for core from 10.0.0.1 port 32962 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.246405 sshd[1197]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.254247 systemd[1]: Created slice user-500.slice. Oct 2 19:02:05.255348 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:02:05.257233 systemd-logind[1125]: New session 1 of user core. Oct 2 19:02:05.267365 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:02:05.268811 systemd[1]: Starting user@500.service... Oct 2 19:02:05.271881 (systemd)[1200]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.332223 systemd[1200]: Queued start job for default target default.target. Oct 2 19:02:05.332711 systemd[1200]: Reached target paths.target. Oct 2 19:02:05.332730 systemd[1200]: Reached target sockets.target. Oct 2 19:02:05.332740 systemd[1200]: Reached target timers.target. Oct 2 19:02:05.332751 systemd[1200]: Reached target basic.target. Oct 2 19:02:05.332805 systemd[1200]: Reached target default.target. Oct 2 19:02:05.332828 systemd[1200]: Startup finished in 54ms. Oct 2 19:02:05.333054 systemd[1]: Started user@500.service. Oct 2 19:02:05.334062 systemd[1]: Started session-1.scope. Oct 2 19:02:05.384952 systemd[1]: Started sshd@1-10.0.0.86:22-10.0.0.1:32976.service. Oct 2 19:02:05.432914 sshd[1209]: Accepted publickey for core from 10.0.0.1 port 32976 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.434388 sshd[1209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.437880 systemd-logind[1125]: New session 2 of user core. Oct 2 19:02:05.438746 systemd[1]: Started session-2.scope. Oct 2 19:02:05.500560 sshd[1209]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:05.504729 systemd[1]: Started sshd@2-10.0.0.86:22-10.0.0.1:32984.service. Oct 2 19:02:05.505225 systemd[1]: sshd@1-10.0.0.86:22-10.0.0.1:32976.service: Deactivated successfully. Oct 2 19:02:05.506103 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:02:05.506606 systemd-logind[1125]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:02:05.507309 systemd-logind[1125]: Removed session 2. Oct 2 19:02:05.541810 sshd[1214]: Accepted publickey for core from 10.0.0.1 port 32984 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.543157 sshd[1214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.547654 systemd[1]: Started session-3.scope. Oct 2 19:02:05.547822 systemd-logind[1125]: New session 3 of user core. Oct 2 19:02:05.597934 sshd[1214]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:05.601757 systemd[1]: sshd@2-10.0.0.86:22-10.0.0.1:32984.service: Deactivated successfully. Oct 2 19:02:05.602384 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:02:05.602872 systemd-logind[1125]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:02:05.604009 systemd[1]: Started sshd@3-10.0.0.86:22-10.0.0.1:32998.service. Oct 2 19:02:05.604614 systemd-logind[1125]: Removed session 3. Oct 2 19:02:05.640164 sshd[1222]: Accepted publickey for core from 10.0.0.1 port 32998 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.641504 sshd[1222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.648069 systemd-logind[1125]: New session 4 of user core. Oct 2 19:02:05.648878 systemd[1]: Started session-4.scope. Oct 2 19:02:05.712718 sshd[1222]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:05.715435 systemd[1]: sshd@3-10.0.0.86:22-10.0.0.1:32998.service: Deactivated successfully. Oct 2 19:02:05.716096 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:02:05.716651 systemd-logind[1125]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:02:05.717778 systemd[1]: Started sshd@4-10.0.0.86:22-10.0.0.1:33008.service. Oct 2 19:02:05.718445 systemd-logind[1125]: Removed session 4. Oct 2 19:02:05.754258 sshd[1228]: Accepted publickey for core from 10.0.0.1 port 33008 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.755502 sshd[1228]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.759173 systemd-logind[1125]: New session 5 of user core. Oct 2 19:02:05.759723 systemd[1]: Started session-5.scope. Oct 2 19:02:05.820727 sudo[1231]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:02:05.821252 sudo[1231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:02:05.837195 dbus-daemon[1113]: avc: received setenforce notice (enforcing=1) Oct 2 19:02:05.838136 sudo[1231]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:05.840409 sshd[1228]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:05.844570 systemd[1]: Started sshd@5-10.0.0.86:22-10.0.0.1:33024.service. Oct 2 19:02:05.845124 systemd[1]: sshd@4-10.0.0.86:22-10.0.0.1:33008.service: Deactivated successfully. Oct 2 19:02:05.845877 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:02:05.846470 systemd-logind[1125]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:02:05.847318 systemd-logind[1125]: Removed session 5. Oct 2 19:02:05.884685 sshd[1234]: Accepted publickey for core from 10.0.0.1 port 33024 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:05.887799 sshd[1234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:05.892556 systemd-logind[1125]: New session 6 of user core. Oct 2 19:02:05.893410 systemd[1]: Started session-6.scope. Oct 2 19:02:05.951034 sudo[1239]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:02:05.951242 sudo[1239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:02:05.955374 sudo[1239]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:05.960317 sudo[1238]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:02:05.960518 sudo[1238]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:02:05.974482 systemd[1]: Stopping audit-rules.service... Oct 2 19:02:05.974000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:02:05.976204 auditctl[1242]: No rules Oct 2 19:02:05.976609 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:02:05.976723 kernel: kauditd_printk_skb: 122 callbacks suppressed Oct 2 19:02:05.976754 kernel: audit: type=1305 audit(1696273325.974:162): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:02:05.976778 systemd[1]: Stopped audit-rules.service. Oct 2 19:02:05.974000 audit[1242]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde9660a0 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:05.978367 systemd[1]: Starting audit-rules.service... Oct 2 19:02:05.982041 kernel: audit: type=1300 audit(1696273325.974:162): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffde9660a0 a2=420 a3=0 items=0 ppid=1 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:05.982108 kernel: audit: type=1327 audit(1696273325.974:162): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:02:05.974000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:02:05.983159 kernel: audit: type=1131 audit(1696273325.975:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.996857 augenrules[1259]: No rules Oct 2 19:02:05.997808 systemd[1]: Finished audit-rules.service. Oct 2 19:02:05.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.998953 sudo[1238]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:05.997000 audit[1238]: USER_END pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.001842 sshd[1234]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:06.003518 kernel: audit: type=1130 audit(1696273325.996:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.003594 kernel: audit: type=1106 audit(1696273325.997:165): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.003614 kernel: audit: type=1104 audit(1696273325.998:166): pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:05.998000 audit[1238]: CRED_DISP pid=1238 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.005458 systemd[1]: Started sshd@6-10.0.0.86:22-10.0.0.1:33030.service. Oct 2 19:02:06.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.86:22-10.0.0.1:33030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.008291 systemd[1]: sshd@5-10.0.0.86:22-10.0.0.1:33024.service: Deactivated successfully. Oct 2 19:02:06.008922 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:02:06.010260 kernel: audit: type=1130 audit(1696273326.004:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.86:22-10.0.0.1:33030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.005000 audit[1234]: USER_END pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.014325 kernel: audit: type=1106 audit(1696273326.005:168): pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.014641 systemd-logind[1125]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:02:06.005000 audit[1234]: CRED_DISP pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.018172 kernel: audit: type=1104 audit(1696273326.005:169): pid=1234 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.86:22-10.0.0.1:33024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.018343 systemd-logind[1125]: Removed session 6. Oct 2 19:02:06.041000 audit[1264]: USER_ACCT pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.042994 sshd[1264]: Accepted publickey for core from 10.0.0.1 port 33030 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:02:06.043000 audit[1264]: CRED_ACQ pid=1264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.043000 audit[1264]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd87b8890 a2=3 a3=1 items=0 ppid=1 pid=1264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:06.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:02:06.044638 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:02:06.047677 systemd-logind[1125]: New session 7 of user core. Oct 2 19:02:06.048506 systemd[1]: Started session-7.scope. Oct 2 19:02:06.051000 audit[1264]: USER_START pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.052000 audit[1267]: CRED_ACQ pid=1267 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:06.099000 audit[1268]: USER_ACCT pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.100928 sudo[1268]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:02:06.100000 audit[1268]: CRED_REFR pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.101160 sudo[1268]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:02:06.101000 audit[1268]: USER_START pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.805610 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:02:06.811956 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:02:06.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:06.812813 systemd[1]: Reached target network-online.target. Oct 2 19:02:06.814622 systemd[1]: Starting docker.service... Oct 2 19:02:06.899117 env[1286]: time="2023-10-02T19:02:06.899060994Z" level=info msg="Starting up" Oct 2 19:02:06.900726 env[1286]: time="2023-10-02T19:02:06.900695332Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:02:06.900845 env[1286]: time="2023-10-02T19:02:06.900830842Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:02:06.900912 env[1286]: time="2023-10-02T19:02:06.900896543Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:02:06.900961 env[1286]: time="2023-10-02T19:02:06.900949526Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:02:06.903035 env[1286]: time="2023-10-02T19:02:06.903000529Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:02:06.903127 env[1286]: time="2023-10-02T19:02:06.903114048Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:02:06.903206 env[1286]: time="2023-10-02T19:02:06.903190079Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:02:06.903258 env[1286]: time="2023-10-02T19:02:06.903244979Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:02:07.212207 env[1286]: time="2023-10-02T19:02:07.212171118Z" level=info msg="Loading containers: start." Oct 2 19:02:07.256000 audit[1323]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.256000 audit[1323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffffa626470 a2=0 a3=1 items=0 ppid=1286 pid=1323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:02:07.260000 audit[1325]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.260000 audit[1325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe49c0650 a2=0 a3=1 items=0 ppid=1286 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.260000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:02:07.262000 audit[1327]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.262000 audit[1327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdb6f77a0 a2=0 a3=1 items=0 ppid=1286 pid=1327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.262000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:02:07.264000 audit[1329]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.264000 audit[1329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffbed9250 a2=0 a3=1 items=0 ppid=1286 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.264000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:02:07.266000 audit[1331]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.266000 audit[1331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce25f5f0 a2=0 a3=1 items=0 ppid=1286 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.266000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:02:07.293000 audit[1336]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.293000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7839780 a2=0 a3=1 items=0 ppid=1286 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.293000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:02:07.299000 audit[1338]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.299000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff859b9b0 a2=0 a3=1 items=0 ppid=1286 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:02:07.302000 audit[1340]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.302000 audit[1340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff9a142f0 a2=0 a3=1 items=0 ppid=1286 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.302000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:02:07.304000 audit[1342]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.304000 audit[1342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcb576dc0 a2=0 a3=1 items=0 ppid=1286 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.304000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:02:07.311000 audit[1346]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.311000 audit[1346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffece4bdd0 a2=0 a3=1 items=0 ppid=1286 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:02:07.312000 audit[1347]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.312000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc7daac00 a2=0 a3=1 items=0 ppid=1286 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.312000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:02:07.319036 kernel: Initializing XFRM netlink socket Oct 2 19:02:07.341808 env[1286]: time="2023-10-02T19:02:07.341767827Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:02:07.361000 audit[1355]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.361000 audit[1355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffcc13b180 a2=0 a3=1 items=0 ppid=1286 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.361000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:02:07.374000 audit[1358]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.374000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffdd193080 a2=0 a3=1 items=0 ppid=1286 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:02:07.377000 audit[1361]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.377000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc80a1eb0 a2=0 a3=1 items=0 ppid=1286 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:02:07.379000 audit[1363]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.379000 audit[1363]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcf4359c0 a2=0 a3=1 items=0 ppid=1286 pid=1363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.379000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:02:07.381000 audit[1365]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.381000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe7cf2ec0 a2=0 a3=1 items=0 ppid=1286 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:02:07.383000 audit[1367]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.383000 audit[1367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd0adbfe0 a2=0 a3=1 items=0 ppid=1286 pid=1367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.383000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:02:07.385000 audit[1369]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.385000 audit[1369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff3af2cc0 a2=0 a3=1 items=0 ppid=1286 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:02:07.391000 audit[1372]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.391000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffce5cf300 a2=0 a3=1 items=0 ppid=1286 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.391000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:02:07.393000 audit[1374]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.393000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdeecde30 a2=0 a3=1 items=0 ppid=1286 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.393000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:02:07.395000 audit[1376]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.395000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd705ca90 a2=0 a3=1 items=0 ppid=1286 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.395000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:02:07.397000 audit[1378]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1378 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.397000 audit[1378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff27ce930 a2=0 a3=1 items=0 ppid=1286 pid=1378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.397000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:02:07.398954 systemd-networkd[1043]: docker0: Link UP Oct 2 19:02:07.404000 audit[1382]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.404000 audit[1382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdba45db0 a2=0 a3=1 items=0 ppid=1286 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:02:07.405000 audit[1383]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:07.405000 audit[1383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffda960500 a2=0 a3=1 items=0 ppid=1286 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:07.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:02:07.407033 env[1286]: time="2023-10-02T19:02:07.406984848Z" level=info msg="Loading containers: done." Oct 2 19:02:07.433186 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1059535404-merged.mount: Deactivated successfully. Oct 2 19:02:07.440124 env[1286]: time="2023-10-02T19:02:07.440084714Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:02:07.440509 env[1286]: time="2023-10-02T19:02:07.440485585Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:02:07.440691 env[1286]: time="2023-10-02T19:02:07.440674915Z" level=info msg="Daemon has completed initialization" Oct 2 19:02:07.453810 systemd[1]: Started docker.service. Oct 2 19:02:07.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:07.461568 env[1286]: time="2023-10-02T19:02:07.461510799Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:02:07.479353 systemd[1]: Reloading. Oct 2 19:02:07.528870 /usr/lib/systemd/system-generators/torcx-generator[1433]: time="2023-10-02T19:02:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:07.528897 /usr/lib/systemd/system-generators/torcx-generator[1433]: time="2023-10-02T19:02:07Z" level=info msg="torcx already run" Oct 2 19:02:07.584495 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:07.584515 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:07.599242 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit: BPF prog-id=34 op=LOAD Oct 2 19:02:07.645000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.645000 audit: BPF prog-id=35 op=LOAD Oct 2 19:02:07.645000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit: BPF prog-id=36 op=LOAD Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.646000 audit: BPF prog-id=37 op=LOAD Oct 2 19:02:07.646000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:02:07.646000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit: BPF prog-id=38 op=LOAD Oct 2 19:02:07.647000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit: BPF prog-id=39 op=LOAD Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.647000 audit: BPF prog-id=40 op=LOAD Oct 2 19:02:07.647000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:02:07.647000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit: BPF prog-id=41 op=LOAD Oct 2 19:02:07.648000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit: BPF prog-id=42 op=LOAD Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.648000 audit: BPF prog-id=43 op=LOAD Oct 2 19:02:07.648000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:02:07.648000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit: BPF prog-id=44 op=LOAD Oct 2 19:02:07.650000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit: BPF prog-id=45 op=LOAD Oct 2 19:02:07.651000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit: BPF prog-id=46 op=LOAD Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit: BPF prog-id=47 op=LOAD Oct 2 19:02:07.651000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:02:07.651000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:07.651000 audit: BPF prog-id=48 op=LOAD Oct 2 19:02:07.651000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:02:07.659668 systemd[1]: Started kubelet.service. Oct 2 19:02:07.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:07.821555 kubelet[1469]: E1002 19:02:07.821420 1469 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:02:07.824064 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:02:07.824187 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:02:07.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:08.011060 env[1139]: time="2023-10-02T19:02:08.010767320Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:02:08.660109 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2477097292.mount: Deactivated successfully. Oct 2 19:02:12.632925 env[1139]: time="2023-10-02T19:02:12.632879835Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:12.634812 env[1139]: time="2023-10-02T19:02:12.634772793Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:12.636397 env[1139]: time="2023-10-02T19:02:12.636367568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:12.638226 env[1139]: time="2023-10-02T19:02:12.638191406Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:12.639001 env[1139]: time="2023-10-02T19:02:12.638958888Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 19:02:12.649105 env[1139]: time="2023-10-02T19:02:12.649058070Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:02:16.509690 env[1139]: time="2023-10-02T19:02:16.509631566Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:16.510815 env[1139]: time="2023-10-02T19:02:16.510786128Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:16.512506 env[1139]: time="2023-10-02T19:02:16.512466826Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:16.514633 env[1139]: time="2023-10-02T19:02:16.514598530Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:16.515435 env[1139]: time="2023-10-02T19:02:16.515375065Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 19:02:16.526169 env[1139]: time="2023-10-02T19:02:16.526133451Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:02:17.917655 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:02:17.917836 systemd[1]: Stopped kubelet.service. Oct 2 19:02:17.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.919555 systemd[1]: Started kubelet.service. Oct 2 19:02:17.920630 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:02:17.920719 kernel: audit: type=1130 audit(1696273337.916:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.929090 kernel: audit: type=1131 audit(1696273337.916:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.929170 kernel: audit: type=1130 audit(1696273337.918:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:17.975768 kubelet[1504]: E1002 19:02:17.975655 1504 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:02:17.978673 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:02:17.978799 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:02:17.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:17.984070 kernel: audit: type=1131 audit(1696273337.977:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:18.734204 env[1139]: time="2023-10-02T19:02:18.734158276Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:18.735660 env[1139]: time="2023-10-02T19:02:18.735627218Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:18.737349 env[1139]: time="2023-10-02T19:02:18.737318981Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:18.739854 env[1139]: time="2023-10-02T19:02:18.739809792Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:18.740818 env[1139]: time="2023-10-02T19:02:18.740287014Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 19:02:18.753527 env[1139]: time="2023-10-02T19:02:18.753489736Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:02:20.415344 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3208367048.mount: Deactivated successfully. Oct 2 19:02:20.910577 env[1139]: time="2023-10-02T19:02:20.910522330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:20.912108 env[1139]: time="2023-10-02T19:02:20.912070924Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:20.913580 env[1139]: time="2023-10-02T19:02:20.913545606Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:20.914388 env[1139]: time="2023-10-02T19:02:20.914354924Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:20.915404 env[1139]: time="2023-10-02T19:02:20.915366404Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 19:02:20.925583 env[1139]: time="2023-10-02T19:02:20.925541115Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:02:21.412316 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount809751029.mount: Deactivated successfully. Oct 2 19:02:21.415225 env[1139]: time="2023-10-02T19:02:21.415186773Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:21.416294 env[1139]: time="2023-10-02T19:02:21.416260774Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:21.417697 env[1139]: time="2023-10-02T19:02:21.417667956Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:21.418776 env[1139]: time="2023-10-02T19:02:21.418739046Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:21.419976 env[1139]: time="2023-10-02T19:02:21.419939078Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 19:02:21.430368 env[1139]: time="2023-10-02T19:02:21.430319831Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:02:22.347232 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2915151751.mount: Deactivated successfully. Oct 2 19:02:24.053983 env[1139]: time="2023-10-02T19:02:24.053938057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:24.055297 env[1139]: time="2023-10-02T19:02:24.055265883Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:24.057417 env[1139]: time="2023-10-02T19:02:24.057391181Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:24.058979 env[1139]: time="2023-10-02T19:02:24.058955143Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:24.059725 env[1139]: time="2023-10-02T19:02:24.059696164Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:02:24.069906 env[1139]: time="2023-10-02T19:02:24.069874013Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:02:24.578376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3310491168.mount: Deactivated successfully. Oct 2 19:02:25.022819 env[1139]: time="2023-10-02T19:02:25.022773535Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:25.024295 env[1139]: time="2023-10-02T19:02:25.024266524Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:25.026035 env[1139]: time="2023-10-02T19:02:25.025992273Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:25.027435 env[1139]: time="2023-10-02T19:02:25.027407077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:25.028211 env[1139]: time="2023-10-02T19:02:25.028183021Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:02:28.167697 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:02:28.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.167877 systemd[1]: Stopped kubelet.service. Oct 2 19:02:28.169375 systemd[1]: Started kubelet.service. Oct 2 19:02:28.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.172659 kernel: audit: type=1130 audit(1696273348.166:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.172721 kernel: audit: type=1131 audit(1696273348.166:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.172739 kernel: audit: type=1130 audit(1696273348.168:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:28.221593 kubelet[1602]: E1002 19:02:28.221537 1602 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:02:28.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:28.224236 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:02:28.224354 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:02:28.227051 kernel: audit: type=1131 audit(1696273348.223:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:02:29.590946 systemd[1]: Stopped kubelet.service. Oct 2 19:02:29.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:29.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:29.596250 kernel: audit: type=1130 audit(1696273349.590:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:29.596385 kernel: audit: type=1131 audit(1696273349.590:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:29.609149 systemd[1]: Reloading. Oct 2 19:02:29.651706 /usr/lib/systemd/system-generators/torcx-generator[1633]: time="2023-10-02T19:02:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:29.651733 /usr/lib/systemd/system-generators/torcx-generator[1633]: time="2023-10-02T19:02:29Z" level=info msg="torcx already run" Oct 2 19:02:29.737550 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:29.737570 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:29.752550 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.805049 kernel: audit: type=1400 audit(1696273349.799:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.805099 kernel: audit: type=1400 audit(1696273349.799:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.805120 kernel: audit: type=1400 audit(1696273349.799:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809679 kernel: audit: type=1400 audit(1696273349.799:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.801000 audit: BPF prog-id=49 op=LOAD Oct 2 19:02:29.801000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit: BPF prog-id=50 op=LOAD Oct 2 19:02:29.804000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit: BPF prog-id=51 op=LOAD Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.808000 audit: BPF prog-id=52 op=LOAD Oct 2 19:02:29.808000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:02:29.808000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit: BPF prog-id=53 op=LOAD Oct 2 19:02:29.809000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit: BPF prog-id=54 op=LOAD Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.809000 audit: BPF prog-id=55 op=LOAD Oct 2 19:02:29.809000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:02:29.809000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit: BPF prog-id=56 op=LOAD Oct 2 19:02:29.810000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit: BPF prog-id=57 op=LOAD Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.810000 audit: BPF prog-id=58 op=LOAD Oct 2 19:02:29.810000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:02:29.810000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit: BPF prog-id=59 op=LOAD Oct 2 19:02:29.812000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit: BPF prog-id=60 op=LOAD Oct 2 19:02:29.813000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit: BPF prog-id=61 op=LOAD Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit: BPF prog-id=62 op=LOAD Oct 2 19:02:29.813000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:02:29.813000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:29.813000 audit: BPF prog-id=63 op=LOAD Oct 2 19:02:29.813000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:02:29.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:29.827397 systemd[1]: Started kubelet.service. Oct 2 19:02:29.873285 kubelet[1670]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:29.873285 kubelet[1670]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:29.873572 kubelet[1670]: I1002 19:02:29.873340 1670 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:29.874755 kubelet[1670]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:29.874755 kubelet[1670]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:30.767816 kubelet[1670]: I1002 19:02:30.767784 1670 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:02:30.767956 kubelet[1670]: I1002 19:02:30.767944 1670 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:30.768347 kubelet[1670]: I1002 19:02:30.768327 1670 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:02:30.773239 kubelet[1670]: I1002 19:02:30.773118 1670 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:30.773651 kubelet[1670]: E1002 19:02:30.773634 1670 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.86:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.775766 kubelet[1670]: W1002 19:02:30.775746 1670 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:30.776653 kubelet[1670]: I1002 19:02:30.776617 1670 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:30.777106 kubelet[1670]: I1002 19:02:30.777092 1670 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:30.777249 kubelet[1670]: I1002 19:02:30.777231 1670 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:02:30.777412 kubelet[1670]: I1002 19:02:30.777396 1670 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:02:30.777474 kubelet[1670]: I1002 19:02:30.777465 1670 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:02:30.777687 kubelet[1670]: I1002 19:02:30.777673 1670 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:30.782543 kubelet[1670]: I1002 19:02:30.782524 1670 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:02:30.782661 kubelet[1670]: I1002 19:02:30.782648 1670 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:30.782872 kubelet[1670]: I1002 19:02:30.782862 1670 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:02:30.782928 kubelet[1670]: I1002 19:02:30.782918 1670 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:30.784309 kubelet[1670]: I1002 19:02:30.784275 1670 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:30.785321 kubelet[1670]: W1002 19:02:30.785263 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.785419 kubelet[1670]: E1002 19:02:30.785408 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.786326 kubelet[1670]: W1002 19:02:30.786283 1670 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:02:30.786472 kubelet[1670]: W1002 19:02:30.786420 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.786543 kubelet[1670]: E1002 19:02:30.786533 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.788278 kubelet[1670]: I1002 19:02:30.788256 1670 server.go:1186] "Started kubelet" Oct 2 19:02:30.788994 kubelet[1670]: E1002 19:02:30.788897 1670 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5fa013b1a558", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 30, 788228440, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 30, 788228440, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.86:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.86:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:02:30.788000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:30.788000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:30.788000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000932e70 a1=4000daeca8 a2=4000932e40 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.788000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:30.789000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:30.789000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:30.789000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000676c20 a1=4000daecc0 a2=4000932f00 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.789000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:30.790425 kubelet[1670]: I1002 19:02:30.790066 1670 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:30.790425 kubelet[1670]: I1002 19:02:30.790100 1670 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:30.790425 kubelet[1670]: I1002 19:02:30.790158 1670 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:30.790425 kubelet[1670]: E1002 19:02:30.790162 1670 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:30.790425 kubelet[1670]: E1002 19:02:30.790186 1670 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:30.791316 kubelet[1670]: I1002 19:02:30.791299 1670 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:02:30.791466 kubelet[1670]: I1002 19:02:30.791452 1670 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:30.791680 kubelet[1670]: I1002 19:02:30.791592 1670 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:30.792181 kubelet[1670]: W1002 19:02:30.792140 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.792309 kubelet[1670]: E1002 19:02:30.792282 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.792372 kubelet[1670]: I1002 19:02:30.792185 1670 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:02:30.793532 kubelet[1670]: E1002 19:02:30.793498 1670 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.794000 audit[1682]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.794000 audit[1682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffebe6af70 a2=0 a3=1 items=0 ppid=1670 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.794000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:30.795000 audit[1683]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.795000 audit[1683]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2e3dc80 a2=0 a3=1 items=0 ppid=1670 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.795000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:30.797000 audit[1685]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.797000 audit[1685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb3c5cd0 a2=0 a3=1 items=0 ppid=1670 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:30.799000 audit[1687]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.799000 audit[1687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc16dcf40 a2=0 a3=1 items=0 ppid=1670 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:02:30.804000 audit[1690]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.804000 audit[1690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc352ce70 a2=0 a3=1 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.804000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:02:30.806000 audit[1692]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.806000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffccf826c0 a2=0 a3=1 items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.806000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:02:30.812701 kubelet[1670]: I1002 19:02:30.812680 1670 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:30.812800 kubelet[1670]: I1002 19:02:30.812789 1670 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:30.812874 kubelet[1670]: I1002 19:02:30.812865 1670 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:30.814864 kubelet[1670]: I1002 19:02:30.814844 1670 policy_none.go:49] "None policy: Start" Oct 2 19:02:30.815455 kubelet[1670]: I1002 19:02:30.815435 1670 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:30.815517 kubelet[1670]: I1002 19:02:30.815459 1670 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:30.815000 audit[1698]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.815000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcb3d1390 a2=0 a3=1 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:02:30.820606 systemd[1]: Created slice kubepods.slice. Oct 2 19:02:30.822000 audit[1702]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.822000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffff941c60 a2=0 a3=1 items=0 ppid=1670 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:02:30.824563 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:02:30.824000 audit[1703]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.824000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffffd3ba30 a2=0 a3=1 items=0 ppid=1670 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.824000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:02:30.827230 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:02:30.829000 audit[1704]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.829000 audit[1704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc05ee580 a2=0 a3=1 items=0 ppid=1670 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:30.831681 kubelet[1670]: I1002 19:02:30.831655 1670 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:30.830000 audit[1670]: AVC avc: denied { mac_admin } for pid=1670 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:30.830000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:30.830000 audit[1670]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000920210 a1=40011ed968 a2=40009201e0 a3=25 items=0 ppid=1 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.830000 audit[1706]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.830000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:30.830000 audit[1706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc362d710 a2=0 a3=1 items=0 ppid=1670 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:02:30.832169 kubelet[1670]: I1002 19:02:30.832154 1670 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:30.832435 kubelet[1670]: I1002 19:02:30.832418 1670 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:30.832996 kubelet[1670]: E1002 19:02:30.832978 1670 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:02:30.834000 audit[1708]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.834000 audit[1708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffffa2ebc10 a2=0 a3=1 items=0 ppid=1670 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:30.837000 audit[1710]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.837000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe50db060 a2=0 a3=1 items=0 ppid=1670 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:02:30.839000 audit[1712]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.839000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffcd4af2a0 a2=0 a3=1 items=0 ppid=1670 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.839000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:02:30.843000 audit[1714]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.843000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffff4c9e220 a2=0 a3=1 items=0 ppid=1670 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:02:30.843651 kubelet[1670]: I1002 19:02:30.843635 1670 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:02:30.844000 audit[1715]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.844000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd431f4c0 a2=0 a3=1 items=0 ppid=1670 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:02:30.844000 audit[1716]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.844000 audit[1716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff64c5550 a2=0 a3=1 items=0 ppid=1670 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:30.845000 audit[1717]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.845000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdad66980 a2=0 a3=1 items=0 ppid=1670 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:30.846000 audit[1718]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.846000 audit[1718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe070d740 a2=0 a3=1 items=0 ppid=1670 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.846000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:02:30.847000 audit[1719]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:30.847000 audit[1719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff224b560 a2=0 a3=1 items=0 ppid=1670 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:30.849000 audit[1721]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.849000 audit[1721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff7459a30 a2=0 a3=1 items=0 ppid=1670 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.849000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:02:30.850000 audit[1722]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.850000 audit[1722]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffd9406d50 a2=0 a3=1 items=0 ppid=1670 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:02:30.853000 audit[1724]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.853000 audit[1724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffff7c30ad0 a2=0 a3=1 items=0 ppid=1670 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.853000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:02:30.854000 audit[1725]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.854000 audit[1725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd26866a0 a2=0 a3=1 items=0 ppid=1670 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:02:30.855000 audit[1726]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.855000 audit[1726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe05eadd0 a2=0 a3=1 items=0 ppid=1670 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:02:30.857000 audit[1728]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.857000 audit[1728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe61c43b0 a2=0 a3=1 items=0 ppid=1670 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:02:30.860000 audit[1730]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.860000 audit[1730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd391a330 a2=0 a3=1 items=0 ppid=1670 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:02:30.861000 audit[1732]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.861000 audit[1732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffffbc29fe0 a2=0 a3=1 items=0 ppid=1670 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:02:30.864000 audit[1734]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.864000 audit[1734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffe5d5aa60 a2=0 a3=1 items=0 ppid=1670 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:02:30.867000 audit[1736]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.867000 audit[1736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=fffff95cd4b0 a2=0 a3=1 items=0 ppid=1670 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:02:30.868570 kubelet[1670]: I1002 19:02:30.868551 1670 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:02:30.868633 kubelet[1670]: I1002 19:02:30.868576 1670 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:02:30.868633 kubelet[1670]: I1002 19:02:30.868595 1670 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:02:30.868681 kubelet[1670]: E1002 19:02:30.868637 1670 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:02:30.868000 audit[1737]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.869723 kubelet[1670]: W1002 19:02:30.869684 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.869765 kubelet[1670]: E1002 19:02:30.869729 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:30.868000 audit[1737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcfa21670 a2=0 a3=1 items=0 ppid=1670 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:02:30.869000 audit[1738]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.869000 audit[1738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5347120 a2=0 a3=1 items=0 ppid=1670 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:02:30.870000 audit[1739]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:30.870000 audit[1739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5124530 a2=0 a3=1 items=0 ppid=1670 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:30.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:02:30.892180 kubelet[1670]: I1002 19:02:30.892155 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:02:30.892567 kubelet[1670]: E1002 19:02:30.892551 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.86:6443/api/v1/nodes\": dial tcp 10.0.0.86:6443: connect: connection refused" node="localhost" Oct 2 19:02:30.968728 kubelet[1670]: I1002 19:02:30.968688 1670 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:30.969988 kubelet[1670]: I1002 19:02:30.969963 1670 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:30.971158 kubelet[1670]: I1002 19:02:30.971124 1670 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:30.971537 kubelet[1670]: I1002 19:02:30.971517 1670 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.86:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.86:6443: connect: connection refused" Oct 2 19:02:30.973262 kubelet[1670]: I1002 19:02:30.973226 1670 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.86:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.86:6443: connect: connection refused" Oct 2 19:02:30.975459 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:02:30.976541 kubelet[1670]: I1002 19:02:30.976504 1670 status_manager.go:698] "Failed to get status for pod" podUID=38d67fd7826b27401b1e8fb941f42327 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.86:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.86:6443: connect: connection refused" Oct 2 19:02:30.989301 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:02:30.992297 kubelet[1670]: I1002 19:02:30.992273 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:30.992382 kubelet[1670]: I1002 19:02:30.992312 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:30.992382 kubelet[1670]: I1002 19:02:30.992337 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:02:30.992382 kubelet[1670]: I1002 19:02:30.992363 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:30.992382 kubelet[1670]: I1002 19:02:30.992383 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:30.992528 kubelet[1670]: I1002 19:02:30.992433 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:30.992528 kubelet[1670]: I1002 19:02:30.992469 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:30.992528 kubelet[1670]: I1002 19:02:30.992492 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:30.992528 kubelet[1670]: I1002 19:02:30.992519 1670 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:30.994042 kubelet[1670]: E1002 19:02:30.993997 1670 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.000144 systemd[1]: Created slice kubepods-burstable-pod38d67fd7826b27401b1e8fb941f42327.slice. Oct 2 19:02:31.094094 kubelet[1670]: E1002 19:02:31.093384 1670 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a5fa013b1a558", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 2, 30, 788228440, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 2, 30, 788228440, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.86:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.86:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:02:31.097354 kubelet[1670]: I1002 19:02:31.097333 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:02:31.098036 kubelet[1670]: E1002 19:02:31.097994 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.86:6443/api/v1/nodes\": dial tcp 10.0.0.86:6443: connect: connection refused" node="localhost" Oct 2 19:02:31.288560 kubelet[1670]: E1002 19:02:31.288537 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.289347 env[1139]: time="2023-10-02T19:02:31.289295839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:31.299813 kubelet[1670]: E1002 19:02:31.299792 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.300319 env[1139]: time="2023-10-02T19:02:31.300270207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:31.302513 kubelet[1670]: E1002 19:02:31.302496 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.303199 env[1139]: time="2023-10-02T19:02:31.302917683Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:38d67fd7826b27401b1e8fb941f42327,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:31.395367 kubelet[1670]: E1002 19:02:31.395268 1670 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.499782 kubelet[1670]: I1002 19:02:31.499749 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:02:31.500255 kubelet[1670]: E1002 19:02:31.500233 1670 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.86:6443/api/v1/nodes\": dial tcp 10.0.0.86:6443: connect: connection refused" node="localhost" Oct 2 19:02:31.689443 kubelet[1670]: W1002 19:02:31.689387 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.689599 kubelet[1670]: E1002 19:02:31.689584 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.694002 kubelet[1670]: W1002 19:02:31.693944 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.694002 kubelet[1670]: E1002 19:02:31.693990 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.791864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3680467224.mount: Deactivated successfully. Oct 2 19:02:31.796979 env[1139]: time="2023-10-02T19:02:31.796924579Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.798775 env[1139]: time="2023-10-02T19:02:31.798740137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.799807 env[1139]: time="2023-10-02T19:02:31.799762188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.800928 env[1139]: time="2023-10-02T19:02:31.800890317Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.802224 env[1139]: time="2023-10-02T19:02:31.802194750Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.804024 env[1139]: time="2023-10-02T19:02:31.803991763Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.804880 env[1139]: time="2023-10-02T19:02:31.804844865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.808002 env[1139]: time="2023-10-02T19:02:31.807973170Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.810525 env[1139]: time="2023-10-02T19:02:31.810493145Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.813145 env[1139]: time="2023-10-02T19:02:31.813113362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.813925 env[1139]: time="2023-10-02T19:02:31.813900195Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.814754 env[1139]: time="2023-10-02T19:02:31.814724718Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:31.844749 env[1139]: time="2023-10-02T19:02:31.844656772Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:31.844749 env[1139]: time="2023-10-02T19:02:31.844698660Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:31.844749 env[1139]: time="2023-10-02T19:02:31.844708932Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:31.844951 env[1139]: time="2023-10-02T19:02:31.844849304Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:31.844951 env[1139]: time="2023-10-02T19:02:31.844891151Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:31.844951 env[1139]: time="2023-10-02T19:02:31.844901703Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:31.845073 env[1139]: time="2023-10-02T19:02:31.845039077Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7297d9f3998326cad2d1f593226c3b094fa5d8100bd236a1ed09baf69ebf22da pid=1761 runtime=io.containerd.runc.v2 Oct 2 19:02:31.845221 env[1139]: time="2023-10-02T19:02:31.845119495Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/24c53237fe9ea39397c75c6949b137f5c4458dc580dd2a9c95014a270d1c4cd4 pid=1762 runtime=io.containerd.runc.v2 Oct 2 19:02:31.845705 env[1139]: time="2023-10-02T19:02:31.845643571Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:31.845779 env[1139]: time="2023-10-02T19:02:31.845718473Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:31.845779 env[1139]: time="2023-10-02T19:02:31.845744772Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:31.845956 env[1139]: time="2023-10-02T19:02:31.845923395Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/38ad41643ed5ccce6bc3dc9dfb8333887855da9f95aefe5f57faf4be9a9df698 pid=1760 runtime=io.containerd.runc.v2 Oct 2 19:02:31.858134 systemd[1]: Started cri-containerd-7297d9f3998326cad2d1f593226c3b094fa5d8100bd236a1ed09baf69ebf22da.scope. Oct 2 19:02:31.860491 systemd[1]: Started cri-containerd-24c53237fe9ea39397c75c6949b137f5c4458dc580dd2a9c95014a270d1c4cd4.scope. Oct 2 19:02:31.871531 systemd[1]: Started cri-containerd-38ad41643ed5ccce6bc3dc9dfb8333887855da9f95aefe5f57faf4be9a9df698.scope. Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.891000 audit: BPF prog-id=64 op=LOAD Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1762 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234633533323337666539656133393339376337356336393439623133 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1762 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234633533323337666539656133393339376337356336393439623133 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.892000 audit: BPF prog-id=65 op=LOAD Oct 2 19:02:31.892000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1762 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234633533323337666539656133393339376337356336393439623133 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit: BPF prog-id=66 op=LOAD Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1761 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732393764396633393938333236636164326431663539333232366333 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1761 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732393764396633393938333236636164326431663539333232366333 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit: BPF prog-id=67 op=LOAD Oct 2 19:02:31.894000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1761 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732393764396633393938333236636164326431663539333232366333 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit: BPF prog-id=68 op=LOAD Oct 2 19:02:31.894000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1761 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732393764396633393938333236636164326431663539333232366333 Oct 2 19:02:31.894000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:02:31.894000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.894000 audit: BPF prog-id=69 op=LOAD Oct 2 19:02:31.894000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1761 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732393764396633393938333236636164326431663539333232366333 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit: BPF prog-id=70 op=LOAD Oct 2 19:02:31.896000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1762 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234633533323337666539656133393339376337356336393439623133 Oct 2 19:02:31.896000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:02:31.896000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.896000 audit: BPF prog-id=71 op=LOAD Oct 2 19:02:31.896000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1762 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234633533323337666539656133393339376337356336393439623133 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.909000 audit: BPF prog-id=72 op=LOAD Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338616434313634336564356363636536626333646339646662383333 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338616434313634336564356363636536626333646339646662383333 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit: BPF prog-id=73 op=LOAD Oct 2 19:02:31.910000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338616434313634336564356363636536626333646339646662383333 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit: BPF prog-id=74 op=LOAD Oct 2 19:02:31.910000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338616434313634336564356363636536626333646339646662383333 Oct 2 19:02:31.910000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:02:31.910000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:31.910000 audit: BPF prog-id=75 op=LOAD Oct 2 19:02:31.910000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:31.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338616434313634336564356363636536626333646339646662383333 Oct 2 19:02:31.925793 env[1139]: time="2023-10-02T19:02:31.925741739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"24c53237fe9ea39397c75c6949b137f5c4458dc580dd2a9c95014a270d1c4cd4\"" Oct 2 19:02:31.926675 kubelet[1670]: E1002 19:02:31.926645 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.930056 env[1139]: time="2023-10-02T19:02:31.929186400Z" level=info msg="CreateContainer within sandbox \"24c53237fe9ea39397c75c6949b137f5c4458dc580dd2a9c95014a270d1c4cd4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:02:31.932853 env[1139]: time="2023-10-02T19:02:31.932820195Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"7297d9f3998326cad2d1f593226c3b094fa5d8100bd236a1ed09baf69ebf22da\"" Oct 2 19:02:31.933797 kubelet[1670]: E1002 19:02:31.933763 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.934250 kubelet[1670]: W1002 19:02:31.934179 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.934250 kubelet[1670]: E1002 19:02:31.934233 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.936102 env[1139]: time="2023-10-02T19:02:31.936062612Z" level=info msg="CreateContainer within sandbox \"7297d9f3998326cad2d1f593226c3b094fa5d8100bd236a1ed09baf69ebf22da\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:02:31.938010 env[1139]: time="2023-10-02T19:02:31.937979493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:38d67fd7826b27401b1e8fb941f42327,Namespace:kube-system,Attempt:0,} returns sandbox id \"38ad41643ed5ccce6bc3dc9dfb8333887855da9f95aefe5f57faf4be9a9df698\"" Oct 2 19:02:31.938717 kubelet[1670]: E1002 19:02:31.938697 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:31.940703 env[1139]: time="2023-10-02T19:02:31.940616577Z" level=info msg="CreateContainer within sandbox \"38ad41643ed5ccce6bc3dc9dfb8333887855da9f95aefe5f57faf4be9a9df698\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:02:31.960323 env[1139]: time="2023-10-02T19:02:31.960265729Z" level=info msg="CreateContainer within sandbox \"24c53237fe9ea39397c75c6949b137f5c4458dc580dd2a9c95014a270d1c4cd4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"9b6fe7dea41ef8d6cef653f354392bf296b99f20288f7fd49eeeab75c159c7ee\"" Oct 2 19:02:31.961114 env[1139]: time="2023-10-02T19:02:31.961085096Z" level=info msg="StartContainer for \"9b6fe7dea41ef8d6cef653f354392bf296b99f20288f7fd49eeeab75c159c7ee\"" Oct 2 19:02:31.964296 env[1139]: time="2023-10-02T19:02:31.964245856Z" level=info msg="CreateContainer within sandbox \"7297d9f3998326cad2d1f593226c3b094fa5d8100bd236a1ed09baf69ebf22da\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"06dd748e2396194ecc54b42d0570de988288fdfcc24a1b15bd739acb06fd0b21\"" Oct 2 19:02:31.964839 env[1139]: time="2023-10-02T19:02:31.964806144Z" level=info msg="StartContainer for \"06dd748e2396194ecc54b42d0570de988288fdfcc24a1b15bd739acb06fd0b21\"" Oct 2 19:02:31.968794 env[1139]: time="2023-10-02T19:02:31.968754936Z" level=info msg="CreateContainer within sandbox \"38ad41643ed5ccce6bc3dc9dfb8333887855da9f95aefe5f57faf4be9a9df698\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8e9168d75afbbf67c88747f12181c8c7b299d152cef45b1e10705712a27a3ac2\"" Oct 2 19:02:31.969279 env[1139]: time="2023-10-02T19:02:31.969251512Z" level=info msg="StartContainer for \"8e9168d75afbbf67c88747f12181c8c7b299d152cef45b1e10705712a27a3ac2\"" Oct 2 19:02:31.981462 systemd[1]: Started cri-containerd-9b6fe7dea41ef8d6cef653f354392bf296b99f20288f7fd49eeeab75c159c7ee.scope. Oct 2 19:02:31.985118 kubelet[1670]: W1002 19:02:31.985034 1670 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.985118 kubelet[1670]: E1002 19:02:31.985096 1670 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:31.987028 systemd[1]: Started cri-containerd-06dd748e2396194ecc54b42d0570de988288fdfcc24a1b15bd739acb06fd0b21.scope. Oct 2 19:02:31.994143 systemd[1]: Started cri-containerd-8e9168d75afbbf67c88747f12181c8c7b299d152cef45b1e10705712a27a3ac2.scope. Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.030000 audit: BPF prog-id=76 op=LOAD Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1761 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036646437343865323339363139346563633534623432643035373064 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1761 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036646437343865323339363139346563633534623432643035373064 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit: BPF prog-id=77 op=LOAD Oct 2 19:02:32.031000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1761 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036646437343865323339363139346563633534623432643035373064 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit: BPF prog-id=78 op=LOAD Oct 2 19:02:32.031000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1761 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036646437343865323339363139346563633534623432643035373064 Oct 2 19:02:32.031000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:02:32.031000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { perfmon } for pid=1881 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit[1881]: AVC avc: denied { bpf } for pid=1881 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.031000 audit: BPF prog-id=79 op=LOAD Oct 2 19:02:32.031000 audit[1881]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1761 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036646437343865323339363139346563633534623432643035373064 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit: BPF prog-id=80 op=LOAD Oct 2 19:02:32.033000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1878]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1762 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962366665376465613431656638643663656636353366333534333932 Oct 2 19:02:32.033000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.033000 audit[1878]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1762 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962366665376465613431656638643663656636353366333534333932 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit: BPF prog-id=81 op=LOAD Oct 2 19:02:32.034000 audit[1878]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1762 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962366665376465613431656638643663656636353366333534333932 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit: BPF prog-id=82 op=LOAD Oct 2 19:02:32.034000 audit[1878]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1762 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962366665376465613431656638643663656636353366333534333932 Oct 2 19:02:32.034000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:02:32.034000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit: BPF prog-id=83 op=LOAD Oct 2 19:02:32.034000 audit[1878]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1762 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962366665376465613431656638643663656636353366333534333932 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.034000 audit: BPF prog-id=84 op=LOAD Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1760 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393136386437356166626266363763383837343766313231383163 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1760 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393136386437356166626266363763383837343766313231383163 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit: BPF prog-id=85 op=LOAD Oct 2 19:02:32.035000 audit[1898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1760 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393136386437356166626266363763383837343766313231383163 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit: BPF prog-id=86 op=LOAD Oct 2 19:02:32.035000 audit[1898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1760 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393136386437356166626266363763383837343766313231383163 Oct 2 19:02:32.035000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:02:32.035000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { perfmon } for pid=1898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit[1898]: AVC avc: denied { bpf } for pid=1898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:32.035000 audit: BPF prog-id=87 op=LOAD Oct 2 19:02:32.035000 audit[1898]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1760 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:32.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865393136386437356166626266363763383837343766313231383163 Oct 2 19:02:32.078586 env[1139]: time="2023-10-02T19:02:32.076844139Z" level=info msg="StartContainer for \"9b6fe7dea41ef8d6cef653f354392bf296b99f20288f7fd49eeeab75c159c7ee\" returns successfully" Oct 2 19:02:32.078856 env[1139]: time="2023-10-02T19:02:32.078820084Z" level=info msg="StartContainer for \"06dd748e2396194ecc54b42d0570de988288fdfcc24a1b15bd739acb06fd0b21\" returns successfully" Oct 2 19:02:32.083462 env[1139]: time="2023-10-02T19:02:32.082999621Z" level=info msg="StartContainer for \"8e9168d75afbbf67c88747f12181c8c7b299d152cef45b1e10705712a27a3ac2\" returns successfully" Oct 2 19:02:32.196772 kubelet[1670]: E1002 19:02:32.196640 1670 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.86:6443: connect: connection refused Oct 2 19:02:32.301447 kubelet[1670]: I1002 19:02:32.301414 1670 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:02:32.877458 kubelet[1670]: E1002 19:02:32.877425 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:32.879925 kubelet[1670]: E1002 19:02:32.879904 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:32.882078 kubelet[1670]: E1002 19:02:32.882060 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:33.885076 kubelet[1670]: E1002 19:02:33.885045 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:33.885490 kubelet[1670]: E1002 19:02:33.885465 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:33.885994 kubelet[1670]: E1002 19:02:33.885975 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:34.197000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.199067 kernel: kauditd_printk_skb: 622 callbacks suppressed Oct 2 19:02:34.199102 kernel: audit: type=1400 audit(1696273354.197:706): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.197000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40056b0300 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.206112 kernel: audit: type=1300 audit(1696273354.197:706): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40056b0300 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.197000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.209631 kernel: audit: type=1327 audit(1696273354.197:706): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.197000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.219024 kernel: audit: type=1400 audit(1696273354.197:707): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.219077 kernel: audit: type=1300 audit(1696273354.197:707): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40057aa120 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.197000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40057aa120 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.224516 kernel: audit: type=1327 audit(1696273354.197:707): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.197000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.197000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.236908 kernel: audit: type=1400 audit(1696273354.197:708): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.236977 kernel: audit: type=1300 audit(1696273354.197:708): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40029b4280 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.197000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40029b4280 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.197000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.245862 kernel: audit: type=1327 audit(1696273354.197:708): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.245894 kernel: audit: type=1400 audit(1696273354.198:709): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.198000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.198000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40057abf20 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.198000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.209000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.209000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4002a4c900 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.209000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.209000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=400bafb770 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:02:34.209000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:02:34.278929 kubelet[1670]: E1002 19:02:34.278882 1670 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:02:34.361481 kubelet[1670]: I1002 19:02:34.361440 1670 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:02:34.372222 kubelet[1670]: E1002 19:02:34.372182 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.472428 kubelet[1670]: E1002 19:02:34.472332 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.515000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.515000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000ae560 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:34.515000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:34.515000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:34.515000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000310f00 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:34.515000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:34.572946 kubelet[1670]: E1002 19:02:34.572897 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.673438 kubelet[1670]: E1002 19:02:34.673407 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.774035 kubelet[1670]: E1002 19:02:34.773924 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.874480 kubelet[1670]: E1002 19:02:34.874447 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:34.885869 kubelet[1670]: E1002 19:02:34.885839 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:34.886253 kubelet[1670]: E1002 19:02:34.886233 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:34.975408 kubelet[1670]: E1002 19:02:34.975370 1670 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:02:35.789956 kubelet[1670]: I1002 19:02:35.789892 1670 apiserver.go:52] "Watching apiserver" Oct 2 19:02:35.892489 kubelet[1670]: I1002 19:02:35.892439 1670 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:35.921853 kubelet[1670]: I1002 19:02:35.921801 1670 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:02:36.655889 kubelet[1670]: E1002 19:02:36.655861 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:36.887898 kubelet[1670]: E1002 19:02:36.887864 1670 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:36.922751 systemd[1]: Reloading. Oct 2 19:02:36.976202 /usr/lib/systemd/system-generators/torcx-generator[2004]: time="2023-10-02T19:02:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:02:36.976554 /usr/lib/systemd/system-generators/torcx-generator[2004]: time="2023-10-02T19:02:36Z" level=info msg="torcx already run" Oct 2 19:02:37.043631 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:02:37.043655 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:02:37.058805 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit: BPF prog-id=88 op=LOAD Oct 2 19:02:37.115000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.115000 audit: BPF prog-id=89 op=LOAD Oct 2 19:02:37.115000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit: BPF prog-id=90 op=LOAD Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit: BPF prog-id=91 op=LOAD Oct 2 19:02:37.117000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:02:37.117000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.117000 audit: BPF prog-id=92 op=LOAD Oct 2 19:02:37.117000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.118000 audit: BPF prog-id=93 op=LOAD Oct 2 19:02:37.118000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit: BPF prog-id=94 op=LOAD Oct 2 19:02:37.119000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit: BPF prog-id=95 op=LOAD Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.119000 audit: BPF prog-id=96 op=LOAD Oct 2 19:02:37.119000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:02:37.119000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit: BPF prog-id=97 op=LOAD Oct 2 19:02:37.120000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit: BPF prog-id=98 op=LOAD Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit: BPF prog-id=99 op=LOAD Oct 2 19:02:37.120000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:02:37.120000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.120000 audit: BPF prog-id=100 op=LOAD Oct 2 19:02:37.120000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.121000 audit: BPF prog-id=101 op=LOAD Oct 2 19:02:37.121000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit: BPF prog-id=102 op=LOAD Oct 2 19:02:37.123000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.123000 audit: BPF prog-id=103 op=LOAD Oct 2 19:02:37.123000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit: BPF prog-id=104 op=LOAD Oct 2 19:02:37.124000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit: BPF prog-id=105 op=LOAD Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit: BPF prog-id=106 op=LOAD Oct 2 19:02:37.124000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:02:37.124000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit: BPF prog-id=107 op=LOAD Oct 2 19:02:37.125000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.125000 audit: BPF prog-id=108 op=LOAD Oct 2 19:02:37.125000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:02:37.138349 kubelet[1670]: I1002 19:02:37.138300 1670 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:37.138467 systemd[1]: Stopping kubelet.service... Oct 2 19:02:37.161388 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:02:37.161593 systemd[1]: Stopped kubelet.service. Oct 2 19:02:37.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.161701 systemd[1]: kubelet.service: Consumed 1.273s CPU time. Oct 2 19:02:37.163588 systemd[1]: Started kubelet.service. Oct 2 19:02:37.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.229537 kubelet[2040]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:37.229537 kubelet[2040]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:37.229537 kubelet[2040]: I1002 19:02:37.229508 2040 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:02:37.234136 kubelet[2040]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:02:37.234136 kubelet[2040]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:02:37.238805 kubelet[2040]: I1002 19:02:37.238755 2040 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:02:37.238805 kubelet[2040]: I1002 19:02:37.238804 2040 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:02:37.239167 kubelet[2040]: I1002 19:02:37.239138 2040 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:02:37.240665 kubelet[2040]: I1002 19:02:37.240629 2040 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:02:37.242427 kubelet[2040]: I1002 19:02:37.241702 2040 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:02:37.243092 kubelet[2040]: W1002 19:02:37.243064 2040 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:02:37.243808 kubelet[2040]: I1002 19:02:37.243787 2040 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:02:37.244037 kubelet[2040]: I1002 19:02:37.244005 2040 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:02:37.244102 kubelet[2040]: I1002 19:02:37.244089 2040 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:02:37.244188 kubelet[2040]: I1002 19:02:37.244124 2040 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:02:37.244188 kubelet[2040]: I1002 19:02:37.244135 2040 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:02:37.244188 kubelet[2040]: I1002 19:02:37.244168 2040 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:37.247586 kubelet[2040]: I1002 19:02:37.247566 2040 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:02:37.247710 kubelet[2040]: I1002 19:02:37.247697 2040 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:02:37.247822 kubelet[2040]: I1002 19:02:37.247810 2040 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.249079 2040 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.249622 2040 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.250198 2040 server.go:1186] "Started kubelet" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.251141 2040 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.251588 2040 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.251618 2040 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.251638 2040 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:02:37.253046 kubelet[2040]: I1002 19:02:37.251806 2040 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:02:37.255692 kubelet[2040]: I1002 19:02:37.255662 2040 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:02:37.256364 kubelet[2040]: I1002 19:02:37.256335 2040 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:02:37.250000 audit[2040]: AVC avc: denied { mac_admin } for pid=2040 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.250000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:37.250000 audit[2040]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a3a9c0 a1=40000594a0 a2=4000a3a990 a3=25 items=0 ppid=1 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:37.250000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:37.250000 audit[2040]: AVC avc: denied { mac_admin } for pid=2040 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.250000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:37.250000 audit[2040]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a362c0 a1=40000594b8 a2=4000a3aa50 a3=25 items=0 ppid=1 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:37.250000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:37.274753 kubelet[2040]: E1002 19:02:37.274688 2040 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:02:37.274753 kubelet[2040]: E1002 19:02:37.274723 2040 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:02:37.305000 audit[2068]: USER_ACCT pid=2068 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.306208 sudo[2068]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:02:37.305000 audit[2068]: CRED_REFR pid=2068 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.306409 sudo[2068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:02:37.308000 audit[2068]: USER_START pid=2068 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.312790 kubelet[2040]: I1002 19:02:37.312767 2040 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:02:37.334784 kubelet[2040]: I1002 19:02:37.334760 2040 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:02:37.334916 kubelet[2040]: I1002 19:02:37.334904 2040 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:02:37.335006 kubelet[2040]: I1002 19:02:37.334995 2040 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:02:37.335330 kubelet[2040]: E1002 19:02:37.335311 2040 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:02:37.341564 kubelet[2040]: I1002 19:02:37.341550 2040 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:02:37.341686 kubelet[2040]: I1002 19:02:37.341673 2040 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:02:37.341747 kubelet[2040]: I1002 19:02:37.341738 2040 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:02:37.341960 kubelet[2040]: I1002 19:02:37.341948 2040 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:02:37.342043 kubelet[2040]: I1002 19:02:37.342032 2040 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:02:37.342092 kubelet[2040]: I1002 19:02:37.342084 2040 policy_none.go:49] "None policy: Start" Oct 2 19:02:37.342641 kubelet[2040]: I1002 19:02:37.342628 2040 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:02:37.342736 kubelet[2040]: I1002 19:02:37.342724 2040 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:02:37.342923 kubelet[2040]: I1002 19:02:37.342909 2040 state_mem.go:75] "Updated machine memory state" Oct 2 19:02:37.346365 kubelet[2040]: I1002 19:02:37.346334 2040 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:02:37.345000 audit[2040]: AVC avc: denied { mac_admin } for pid=2040 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:37.345000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:02:37.345000 audit[2040]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40015f6240 a1=40015b93f8 a2=40015f6210 a3=25 items=0 ppid=1 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:37.345000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:02:37.346605 kubelet[2040]: I1002 19:02:37.346393 2040 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:02:37.346605 kubelet[2040]: I1002 19:02:37.346577 2040 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:02:37.358956 kubelet[2040]: I1002 19:02:37.358932 2040 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:02:37.364845 kubelet[2040]: I1002 19:02:37.364824 2040 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:02:37.365195 kubelet[2040]: I1002 19:02:37.365181 2040 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:02:37.436370 kubelet[2040]: I1002 19:02:37.436337 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:37.436600 kubelet[2040]: I1002 19:02:37.436584 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:37.436708 kubelet[2040]: I1002 19:02:37.436692 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:37.452444 kubelet[2040]: E1002 19:02:37.452417 2040 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.458231 kubelet[2040]: I1002 19:02:37.458211 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.458346 kubelet[2040]: I1002 19:02:37.458333 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.458414 kubelet[2040]: I1002 19:02:37.458405 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:37.458504 kubelet[2040]: I1002 19:02:37.458493 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:37.458575 kubelet[2040]: I1002 19:02:37.458565 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.458642 kubelet[2040]: I1002 19:02:37.458631 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.458826 kubelet[2040]: I1002 19:02:37.458802 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:02:37.458915 kubelet[2040]: I1002 19:02:37.458903 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/38d67fd7826b27401b1e8fb941f42327-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"38d67fd7826b27401b1e8fb941f42327\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:37.459065 kubelet[2040]: I1002 19:02:37.459012 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:37.744122 kubelet[2040]: E1002 19:02:37.744081 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:37.744250 kubelet[2040]: E1002 19:02:37.744091 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:37.753202 kubelet[2040]: E1002 19:02:37.753159 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:37.790716 sudo[2068]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:37.789000 audit[2068]: USER_END pid=2068 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:37.789000 audit[2068]: CRED_DISP pid=2068 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:38.249572 kubelet[2040]: I1002 19:02:38.249524 2040 apiserver.go:52] "Watching apiserver" Oct 2 19:02:38.256503 kubelet[2040]: I1002 19:02:38.256476 2040 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:02:38.264763 kubelet[2040]: I1002 19:02:38.264724 2040 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:02:38.656180 kubelet[2040]: E1002 19:02:38.656091 2040 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:02:38.656795 kubelet[2040]: E1002 19:02:38.656776 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:38.854295 kubelet[2040]: E1002 19:02:38.854251 2040 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:02:38.855319 kubelet[2040]: E1002 19:02:38.855303 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:39.058387 kubelet[2040]: E1002 19:02:39.058355 2040 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:02:39.059133 kubelet[2040]: E1002 19:02:39.059118 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:39.261871 kubelet[2040]: I1002 19:02:39.261713 2040 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=3.261674864 pod.CreationTimestamp="2023-10-02 19:02:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:39.261207922 +0000 UTC m=+2.091963231" watchObservedRunningTime="2023-10-02 19:02:39.261674864 +0000 UTC m=+2.092430173" Oct 2 19:02:39.347102 kubelet[2040]: E1002 19:02:39.346989 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:39.347275 kubelet[2040]: E1002 19:02:39.347014 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:39.347355 kubelet[2040]: E1002 19:02:39.347332 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:39.495864 sudo[1268]: pam_unix(sudo:session): session closed for user root Oct 2 19:02:39.494000 audit[1268]: USER_END pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.499571 sshd[1264]: pam_unix(sshd:session): session closed for user core Oct 2 19:02:39.500269 kernel: kauditd_printk_skb: 277 callbacks suppressed Oct 2 19:02:39.500334 kernel: audit: type=1106 audit(1696273359.494:968): pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.500361 kernel: audit: type=1104 audit(1696273359.494:969): pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.494000 audit[1268]: CRED_DISP pid=1268 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.502323 systemd-logind[1125]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:02:39.499000 audit[1264]: USER_END pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:39.503366 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:02:39.503561 systemd[1]: session-7.scope: Consumed 6.788s CPU time. Oct 2 19:02:39.503964 systemd[1]: sshd@6-10.0.0.86:22-10.0.0.1:33030.service: Deactivated successfully. Oct 2 19:02:39.505232 systemd-logind[1125]: Removed session 7. Oct 2 19:02:39.507021 kernel: audit: type=1106 audit(1696273359.499:970): pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:39.499000 audit[1264]: CRED_DISP pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:39.510012 kernel: audit: type=1104 audit(1696273359.499:971): pid=1264 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:02:39.510075 kernel: audit: type=1131 audit(1696273359.502:972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.86:22-10.0.0.1:33030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.86:22-10.0.0.1:33030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:02:39.654044 kubelet[2040]: I1002 19:02:39.653836 2040 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.6537973470000003 pod.CreationTimestamp="2023-10-02 19:02:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:39.653707142 +0000 UTC m=+2.484462451" watchObservedRunningTime="2023-10-02 19:02:39.653797347 +0000 UTC m=+2.484552656" Oct 2 19:02:40.347508 kubelet[2040]: E1002 19:02:40.347475 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:42.623393 kubelet[2040]: E1002 19:02:42.623359 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:42.657333 kubelet[2040]: I1002 19:02:42.657293 2040 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=5.657236042 pod.CreationTimestamp="2023-10-02 19:02:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:40.053275452 +0000 UTC m=+2.884030761" watchObservedRunningTime="2023-10-02 19:02:42.657236042 +0000 UTC m=+5.487991351" Oct 2 19:02:43.351490 kubelet[2040]: E1002 19:02:43.350666 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:44.455974 kubelet[2040]: E1002 19:02:44.452740 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:45.353323 kubelet[2040]: E1002 19:02:45.353294 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:46.355676 kubelet[2040]: E1002 19:02:46.355649 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:47.213618 kubelet[2040]: E1002 19:02:47.213579 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:47.357244 kubelet[2040]: E1002 19:02:47.357208 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:47.707000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:02:47.707000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f11b80 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.717538 kernel: audit: type=1400 audit(1696273367.707:973): avc: denied { watch } for pid=1917 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:02:47.717666 kernel: audit: type=1300 audit(1696273367.707:973): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f11b80 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.717690 kernel: audit: type=1327 audit(1696273367.707:973): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.743000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40000af6a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.752557 kernel: audit: type=1400 audit(1696273367.743:974): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.752660 kernel: audit: type=1300 audit(1696273367.743:974): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40000af6a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.752693 kernel: audit: type=1327 audit(1696273367.743:974): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.759776 kernel: audit: type=1400 audit(1696273367.743:975): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.759876 kernel: audit: type=1300 audit(1696273367.743:975): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ff0000 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.743000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000ff0000 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.765048 kernel: audit: type=1327 audit(1696273367.743:975): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.771694 kernel: audit: type=1400 audit(1696273367.743:976): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.743000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=40000af860 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.743000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:02:47.743000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40000af880 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:02:47.743000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:02:47.959009 update_engine[1129]: I1002 19:02:47.958962 1129 update_attempter.cc:505] Updating boot flags... Oct 2 19:02:51.899168 kubelet[2040]: I1002 19:02:51.897947 2040 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:02:51.899168 kubelet[2040]: I1002 19:02:51.898484 2040 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:02:51.899516 env[1139]: time="2023-10-02T19:02:51.898240556Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:02:52.651097 kubelet[2040]: I1002 19:02:52.651063 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:52.660059 systemd[1]: Created slice kubepods-besteffort-pod2a1ce07f_25ea_4923_ad14_d08040dc986e.slice. Oct 2 19:02:52.665610 kubelet[2040]: I1002 19:02:52.665576 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:52.674011 systemd[1]: Created slice kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice. Oct 2 19:02:52.767687 kubelet[2040]: I1002 19:02:52.767646 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-cgroup\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768092 kubelet[2040]: I1002 19:02:52.768074 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-etc-cni-netd\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768284 kubelet[2040]: I1002 19:02:52.768265 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-xtables-lock\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768390 kubelet[2040]: I1002 19:02:52.768378 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-kernel\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768484 kubelet[2040]: I1002 19:02:52.768474 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2a1ce07f-25ea-4923-ad14-d08040dc986e-lib-modules\") pod \"kube-proxy-w6sj8\" (UID: \"2a1ce07f-25ea-4923-ad14-d08040dc986e\") " pod="kube-system/kube-proxy-w6sj8" Oct 2 19:02:52.768563 kubelet[2040]: I1002 19:02:52.768554 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cni-path\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768648 kubelet[2040]: I1002 19:02:52.768638 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-clustermesh-secrets\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768727 kubelet[2040]: I1002 19:02:52.768718 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2a1ce07f-25ea-4923-ad14-d08040dc986e-kube-proxy\") pod \"kube-proxy-w6sj8\" (UID: \"2a1ce07f-25ea-4923-ad14-d08040dc986e\") " pod="kube-system/kube-proxy-w6sj8" Oct 2 19:02:52.768798 kubelet[2040]: I1002 19:02:52.768789 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-lib-modules\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.768880 kubelet[2040]: I1002 19:02:52.768870 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s5st4\" (UniqueName: \"kubernetes.io/projected/2a1ce07f-25ea-4923-ad14-d08040dc986e-kube-api-access-s5st4\") pod \"kube-proxy-w6sj8\" (UID: \"2a1ce07f-25ea-4923-ad14-d08040dc986e\") " pod="kube-system/kube-proxy-w6sj8" Oct 2 19:02:52.768953 kubelet[2040]: I1002 19:02:52.768944 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hostproc\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769096 kubelet[2040]: I1002 19:02:52.769061 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-config-path\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769160 kubelet[2040]: I1002 19:02:52.769126 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-net\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769160 kubelet[2040]: I1002 19:02:52.769150 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2a1ce07f-25ea-4923-ad14-d08040dc986e-xtables-lock\") pod \"kube-proxy-w6sj8\" (UID: \"2a1ce07f-25ea-4923-ad14-d08040dc986e\") " pod="kube-system/kube-proxy-w6sj8" Oct 2 19:02:52.769216 kubelet[2040]: I1002 19:02:52.769190 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hubble-tls\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769242 kubelet[2040]: I1002 19:02:52.769235 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-bpf-maps\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769279 kubelet[2040]: I1002 19:02:52.769265 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-run\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.769311 kubelet[2040]: I1002 19:02:52.769293 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nbwfn\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-kube-api-access-nbwfn\") pod \"cilium-c9s82\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " pod="kube-system/cilium-c9s82" Oct 2 19:02:52.896865 kubelet[2040]: I1002 19:02:52.896830 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:02:52.910364 systemd[1]: Created slice kubepods-besteffort-pod419f1089_62ba_43b4_ae40_9a1b21040678.slice. Oct 2 19:02:52.970984 kubelet[2040]: E1002 19:02:52.970952 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:52.972425 env[1139]: time="2023-10-02T19:02:52.971974453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-w6sj8,Uid:2a1ce07f-25ea-4923-ad14-d08040dc986e,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:52.976101 kubelet[2040]: E1002 19:02:52.976071 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:52.977089 env[1139]: time="2023-10-02T19:02:52.976810770Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-c9s82,Uid:bdff57a1-eef1-4e8a-9c3e-d31c448cbef5,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:52.989717 env[1139]: time="2023-10-02T19:02:52.989614598Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:52.989717 env[1139]: time="2023-10-02T19:02:52.989680839Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:52.989717 env[1139]: time="2023-10-02T19:02:52.989692359Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:52.994028 env[1139]: time="2023-10-02T19:02:52.993929901Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f4a2aa708d4c2b04bd20af6ca7f7ed499197ef0ce3f01d772766c4754be27925 pid=2160 runtime=io.containerd.runc.v2 Oct 2 19:02:53.001858 env[1139]: time="2023-10-02T19:02:52.999262030Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:53.001858 env[1139]: time="2023-10-02T19:02:52.999304831Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:53.001858 env[1139]: time="2023-10-02T19:02:52.999314671Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:53.001858 env[1139]: time="2023-10-02T19:02:52.999521916Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218 pid=2176 runtime=io.containerd.runc.v2 Oct 2 19:02:53.009198 systemd[1]: Started cri-containerd-f4a2aa708d4c2b04bd20af6ca7f7ed499197ef0ce3f01d772766c4754be27925.scope. Oct 2 19:02:53.019070 systemd[1]: Started cri-containerd-0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218.scope. Oct 2 19:02:53.046029 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:02:53.049582 kernel: audit: type=1400 audit(1696273373.044:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049626 kernel: audit: type=1400 audit(1696273373.044:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.053150 kernel: audit: type=1400 audit(1696273373.044:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.053287 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:53.053309 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:53.053322 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:02:53.053339 kernel: audit: backlog limit exceeded Oct 2 19:02:53.053356 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:02:53.053369 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:02:53.053382 kernel: audit: backlog limit exceeded Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.045000 audit: BPF prog-id=109 op=LOAD Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2176 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653762646339323639336539333437623235393134363563313763 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2176 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653762646339323639336539333437623235393134363563313763 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit: BPF prog-id=110 op=LOAD Oct 2 19:02:53.046000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.046000 audit: BPF prog-id=111 op=LOAD Oct 2 19:02:53.046000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2176 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653762646339323639336539333437623235393134363563313763 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { perfmon } for pid=2193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2160 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613261613730386434633262303462643230616636636137663765 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2160 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.049000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613261613730386434633262303462643230616636636137663765 Oct 2 19:02:53.049000 audit: BPF prog-id=112 op=LOAD Oct 2 19:02:53.049000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2176 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653762646339323639336539333437623235393134363563313763 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:02:53.052000 audit[2193]: AVC avc: denied { bpf } for pid=2193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit: BPF prog-id=113 op=LOAD Oct 2 19:02:53.052000 audit[2193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2176 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061653762646339323639336539333437623235393134363563313763 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.052000 audit: BPF prog-id=114 op=LOAD Oct 2 19:02:53.052000 audit[2178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2160 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613261613730386434633262303462643230616636636137663765 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit: BPF prog-id=115 op=LOAD Oct 2 19:02:53.059000 audit[2178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2160 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613261613730386434633262303462643230616636636137663765 Oct 2 19:02:53.059000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:02:53.059000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { perfmon } for pid=2178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit[2178]: AVC avc: denied { bpf } for pid=2178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.059000 audit: BPF prog-id=116 op=LOAD Oct 2 19:02:53.059000 audit[2178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2160 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634613261613730386434633262303462643230616636636137663765 Oct 2 19:02:53.071992 kubelet[2040]: I1002 19:02:53.071956 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/419f1089-62ba-43b4-ae40-9a1b21040678-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-29zdg\" (UID: \"419f1089-62ba-43b4-ae40-9a1b21040678\") " pod="kube-system/cilium-operator-f59cbd8c6-29zdg" Oct 2 19:02:53.072129 kubelet[2040]: I1002 19:02:53.072022 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f6l76\" (UniqueName: \"kubernetes.io/projected/419f1089-62ba-43b4-ae40-9a1b21040678-kube-api-access-f6l76\") pod \"cilium-operator-f59cbd8c6-29zdg\" (UID: \"419f1089-62ba-43b4-ae40-9a1b21040678\") " pod="kube-system/cilium-operator-f59cbd8c6-29zdg" Oct 2 19:02:53.073115 env[1139]: time="2023-10-02T19:02:53.073077285Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-c9s82,Uid:bdff57a1-eef1-4e8a-9c3e-d31c448cbef5,Namespace:kube-system,Attempt:0,} returns sandbox id \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\"" Oct 2 19:02:53.074383 kubelet[2040]: E1002 19:02:53.074352 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:53.076336 env[1139]: time="2023-10-02T19:02:53.076299799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-w6sj8,Uid:2a1ce07f-25ea-4923-ad14-d08040dc986e,Namespace:kube-system,Attempt:0,} returns sandbox id \"f4a2aa708d4c2b04bd20af6ca7f7ed499197ef0ce3f01d772766c4754be27925\"" Oct 2 19:02:53.077220 kubelet[2040]: E1002 19:02:53.077201 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:53.081816 env[1139]: time="2023-10-02T19:02:53.081245472Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:02:53.083365 env[1139]: time="2023-10-02T19:02:53.083171356Z" level=info msg="CreateContainer within sandbox \"f4a2aa708d4c2b04bd20af6ca7f7ed499197ef0ce3f01d772766c4754be27925\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:02:53.098512 env[1139]: time="2023-10-02T19:02:53.098459867Z" level=info msg="CreateContainer within sandbox \"f4a2aa708d4c2b04bd20af6ca7f7ed499197ef0ce3f01d772766c4754be27925\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"53c6c7a9de8b73db59d6b09368a35b160ebfec3242a03ba629e8c4dca2e70506\"" Oct 2 19:02:53.099601 env[1139]: time="2023-10-02T19:02:53.099554052Z" level=info msg="StartContainer for \"53c6c7a9de8b73db59d6b09368a35b160ebfec3242a03ba629e8c4dca2e70506\"" Oct 2 19:02:53.117165 systemd[1]: Started cri-containerd-53c6c7a9de8b73db59d6b09368a35b160ebfec3242a03ba629e8c4dca2e70506.scope. Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2160 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533633663376139646538623733646235396436623039333638613335 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit: BPF prog-id=117 op=LOAD Oct 2 19:02:53.161000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2160 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533633663376139646538623733646235396436623039333638613335 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit: BPF prog-id=118 op=LOAD Oct 2 19:02:53.161000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2160 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533633663376139646538623733646235396436623039333638613335 Oct 2 19:02:53.161000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:02:53.161000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.161000 audit: BPF prog-id=119 op=LOAD Oct 2 19:02:53.161000 audit[2239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2160 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533633663376139646538623733646235396436623039333638613335 Oct 2 19:02:53.184354 env[1139]: time="2023-10-02T19:02:53.184250476Z" level=info msg="StartContainer for \"53c6c7a9de8b73db59d6b09368a35b160ebfec3242a03ba629e8c4dca2e70506\" returns successfully" Oct 2 19:02:53.307000 audit[2291]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.307000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff16cf680 a2=0 a3=ffff889636c0 items=0 ppid=2250 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:53.308000 audit[2292]: NETFILTER_CFG table=nat:60 family=10 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.308000 audit[2292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca6e5290 a2=0 a3=ffff85bbf6c0 items=0 ppid=2250 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.308000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:53.308000 audit[2290]: NETFILTER_CFG table=mangle:61 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.308000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2ba9e30 a2=0 a3=ffff9e6496c0 items=0 ppid=2250 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:02:53.310000 audit[2293]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.310000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe584fda0 a2=0 a3=ffffb54556c0 items=0 ppid=2250 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.310000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:53.311000 audit[2294]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.311000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc70c95d0 a2=0 a3=ffffb49d46c0 items=0 ppid=2250 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:02:53.312000 audit[2295]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.312000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda87a100 a2=0 a3=ffff9f6896c0 items=0 ppid=2250 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:02:53.367338 kubelet[2040]: E1002 19:02:53.367301 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:53.409000 audit[2296]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.409000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff5a40e40 a2=0 a3=ffffa9e8a6c0 items=0 ppid=2250 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.409000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:53.413000 audit[2298]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.413000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc5852f10 a2=0 a3=ffffbdc626c0 items=0 ppid=2250 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.413000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:02:53.416000 audit[2301]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.416000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc625e160 a2=0 a3=ffffa8d406c0 items=0 ppid=2250 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.416000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:02:53.418000 audit[2302]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.418000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6cad350 a2=0 a3=ffffaf9a46c0 items=0 ppid=2250 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:53.421000 audit[2304]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.421000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe2c06a00 a2=0 a3=ffffa0ced6c0 items=0 ppid=2250 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:53.422000 audit[2305]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.422000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd990b50 a2=0 a3=ffff8a2b26c0 items=0 ppid=2250 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.422000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:53.426000 audit[2307]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.426000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff55ce030 a2=0 a3=ffff9f80c6c0 items=0 ppid=2250 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.426000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:53.430000 audit[2310]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.430000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffd638300 a2=0 a3=ffff8ae766c0 items=0 ppid=2250 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:02:53.433000 audit[2311]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.433000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4d03210 a2=0 a3=ffffb96446c0 items=0 ppid=2250 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:53.435000 audit[2313]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.435000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdddfa9d0 a2=0 a3=ffffbbd996c0 items=0 ppid=2250 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:53.436000 audit[2314]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.436000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcddd9d90 a2=0 a3=ffff980896c0 items=0 ppid=2250 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:53.440000 audit[2316]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.440000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc3af5160 a2=0 a3=ffffaccae6c0 items=0 ppid=2250 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.440000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:53.442000 audit[2319]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.442000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc1bc26a0 a2=0 a3=ffffabffd6c0 items=0 ppid=2250 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:53.446000 audit[2322]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.446000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe7848b50 a2=0 a3=ffffbb2eb6c0 items=0 ppid=2250 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:53.449000 audit[2323]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.449000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff4ef9f50 a2=0 a3=ffffb51d66c0 items=0 ppid=2250 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:53.450000 audit[2325]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.450000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc2af94d0 a2=0 a3=ffff947476c0 items=0 ppid=2250 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:53.455000 audit[2328]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:02:53.455000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc2c29e70 a2=0 a3=ffffb32146c0 items=0 ppid=2250 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:53.465000 audit[2333]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:53.465000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=fffff946ff70 a2=0 a3=ffff895b96c0 items=0 ppid=2250 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.465000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:53.470000 audit[2333]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:02:53.470000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff946ff70 a2=0 a3=ffff895b96c0 items=0 ppid=2250 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:53.481000 audit[2338]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.481000 audit[2338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd8915760 a2=0 a3=ffff943476c0 items=0 ppid=2250 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.481000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:02:53.484000 audit[2340]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.484000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd2a93b50 a2=0 a3=ffffb93d46c0 items=0 ppid=2250 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:02:53.488000 audit[2343]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.488000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd5044a30 a2=0 a3=ffffb39df6c0 items=0 ppid=2250 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:02:53.488000 audit[2344]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.488000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde50aa10 a2=0 a3=ffffaa8cd6c0 items=0 ppid=2250 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:02:53.490000 audit[2346]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.490000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd106c680 a2=0 a3=ffffab4b86c0 items=0 ppid=2250 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.490000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:02:53.491000 audit[2347]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.491000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffda5dc80 a2=0 a3=ffff9c2fb6c0 items=0 ppid=2250 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.491000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:02:53.494000 audit[2349]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.494000 audit[2349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffed3320d0 a2=0 a3=ffffbb8226c0 items=0 ppid=2250 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:02:53.498000 audit[2352]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.498000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc9d288c0 a2=0 a3=ffff8a85e6c0 items=0 ppid=2250 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.498000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:02:53.499000 audit[2353]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.499000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2400540 a2=0 a3=ffff8c5a76c0 items=0 ppid=2250 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.499000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:02:53.503000 audit[2355]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.503000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc8c8c3b0 a2=0 a3=ffffb990e6c0 items=0 ppid=2250 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.503000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:02:53.505000 audit[2356]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.505000 audit[2356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff844d510 a2=0 a3=ffffba1cb6c0 items=0 ppid=2250 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.505000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:02:53.509000 audit[2358]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.509000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd6998e90 a2=0 a3=ffff89f856c0 items=0 ppid=2250 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.509000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:02:53.512000 audit[2361]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.512000 audit[2361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd28eab50 a2=0 a3=ffff915e76c0 items=0 ppid=2250 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.512000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:02:53.516352 kubelet[2040]: E1002 19:02:53.516107 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:53.516685 env[1139]: time="2023-10-02T19:02:53.516631185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-29zdg,Uid:419f1089-62ba-43b4-ae40-9a1b21040678,Namespace:kube-system,Attempt:0,}" Oct 2 19:02:53.524000 audit[2364]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.524000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffa0da3d0 a2=0 a3=ffffbd6316c0 items=0 ppid=2250 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.524000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:02:53.526000 audit[2365]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.526000 audit[2365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe422e400 a2=0 a3=ffffab6a86c0 items=0 ppid=2250 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:02:53.528000 audit[2371]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.528000 audit[2371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe7938010 a2=0 a3=ffffad87d6c0 items=0 ppid=2250 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:53.533779 env[1139]: time="2023-10-02T19:02:53.533677416Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:02:53.533779 env[1139]: time="2023-10-02T19:02:53.533726977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:02:53.533779 env[1139]: time="2023-10-02T19:02:53.533737417Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:02:53.534005 env[1139]: time="2023-10-02T19:02:53.533969623Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3 pid=2376 runtime=io.containerd.runc.v2 Oct 2 19:02:53.533000 audit[2384]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2384 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:02:53.533000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe5716390 a2=0 a3=ffffacc736c0 items=0 ppid=2250 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.533000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:02:53.538000 audit[2397]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:53.538000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc6c2c630 a2=0 a3=ffff9d29c6c0 items=0 ppid=2250 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.538000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:53.539000 audit[2397]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:02:53.539000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc6c2c630 a2=0 a3=ffff9d29c6c0 items=0 ppid=2250 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.539000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:02:53.544981 systemd[1]: Started cri-containerd-64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3.scope. Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.567000 audit: BPF prog-id=120 op=LOAD Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2376 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313239623261303531376564326338386164386434303338303632 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2376 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313239623261303531376564326338386164386434303338303632 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit: BPF prog-id=121 op=LOAD Oct 2 19:02:53.568000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2376 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313239623261303531376564326338386164386434303338303632 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit: BPF prog-id=122 op=LOAD Oct 2 19:02:53.568000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2376 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313239623261303531376564326338386164386434303338303632 Oct 2 19:02:53.568000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:02:53.568000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:02:53.568000 audit: BPF prog-id=123 op=LOAD Oct 2 19:02:53.568000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2376 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:02:53.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634313239623261303531376564326338386164386434303338303632 Oct 2 19:02:53.588967 env[1139]: time="2023-10-02T19:02:53.588928604Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-29zdg,Uid:419f1089-62ba-43b4-ae40-9a1b21040678,Namespace:kube-system,Attempt:0,} returns sandbox id \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\"" Oct 2 19:02:53.589566 kubelet[2040]: E1002 19:02:53.589547 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:53.859382 kubelet[2040]: I1002 19:02:53.859334 2040 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-w6sj8" podStartSLOduration=1.859266169 pod.CreationTimestamp="2023-10-02 19:02:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:02:53.857658052 +0000 UTC m=+16.688413401" watchObservedRunningTime="2023-10-02 19:02:53.859266169 +0000 UTC m=+16.690021478" Oct 2 19:02:54.369052 kubelet[2040]: E1002 19:02:54.368930 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:02:57.231520 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount9897972.mount: Deactivated successfully. Oct 2 19:02:59.645240 env[1139]: time="2023-10-02T19:02:59.645191347Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:59.646648 env[1139]: time="2023-10-02T19:02:59.646620852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:59.648635 env[1139]: time="2023-10-02T19:02:59.648596647Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:02:59.649263 env[1139]: time="2023-10-02T19:02:59.649234138Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 19:02:59.651949 env[1139]: time="2023-10-02T19:02:59.651915426Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:02:59.655583 env[1139]: time="2023-10-02T19:02:59.655550770Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:02:59.668668 env[1139]: time="2023-10-02T19:02:59.668626841Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" Oct 2 19:02:59.670147 env[1139]: time="2023-10-02T19:02:59.669590498Z" level=info msg="StartContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" Oct 2 19:02:59.689535 systemd[1]: Started cri-containerd-f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59.scope. Oct 2 19:02:59.711161 systemd[1]: cri-containerd-f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59.scope: Deactivated successfully. Oct 2 19:02:59.715585 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59-rootfs.mount: Deactivated successfully. Oct 2 19:02:59.918789 env[1139]: time="2023-10-02T19:02:59.918741305Z" level=info msg="shim disconnected" id=f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59 Oct 2 19:02:59.919060 env[1139]: time="2023-10-02T19:02:59.919039990Z" level=warning msg="cleaning up after shim disconnected" id=f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59 namespace=k8s.io Oct 2 19:02:59.919289 env[1139]: time="2023-10-02T19:02:59.919105871Z" level=info msg="cleaning up dead shim" Oct 2 19:02:59.928772 env[1139]: time="2023-10-02T19:02:59.928728761Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:02:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2440 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:02:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:02:59.929219 env[1139]: time="2023-10-02T19:02:59.929120048Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:02:59.929387 env[1139]: time="2023-10-02T19:02:59.929342732Z" level=error msg="Failed to pipe stdout of container \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" error="reading from a closed fifo" Oct 2 19:02:59.929436 env[1139]: time="2023-10-02T19:02:59.929415094Z" level=error msg="Failed to pipe stderr of container \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" error="reading from a closed fifo" Oct 2 19:02:59.934974 env[1139]: time="2023-10-02T19:02:59.934903471Z" level=error msg="StartContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:02:59.935415 kubelet[2040]: E1002 19:02:59.935321 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59" Oct 2 19:02:59.939089 kubelet[2040]: E1002 19:02:59.937647 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:02:59.939089 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:02:59.939089 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:02:59.939089 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:02:59.939325 kubelet[2040]: E1002 19:02:59.937702 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:00.379857 kubelet[2040]: E1002 19:03:00.379768 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:00.383267 env[1139]: time="2023-10-02T19:03:00.383228659Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:03:00.408734 env[1139]: time="2023-10-02T19:03:00.408692492Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" Oct 2 19:03:00.411173 env[1139]: time="2023-10-02T19:03:00.411141733Z" level=info msg="StartContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" Oct 2 19:03:00.428636 systemd[1]: Started cri-containerd-85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158.scope. Oct 2 19:03:00.455260 systemd[1]: cri-containerd-85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158.scope: Deactivated successfully. Oct 2 19:03:00.478765 env[1139]: time="2023-10-02T19:03:00.478714321Z" level=info msg="shim disconnected" id=85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158 Oct 2 19:03:00.478957 env[1139]: time="2023-10-02T19:03:00.478775083Z" level=warning msg="cleaning up after shim disconnected" id=85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158 namespace=k8s.io Oct 2 19:03:00.478957 env[1139]: time="2023-10-02T19:03:00.478789923Z" level=info msg="cleaning up dead shim" Oct 2 19:03:00.487646 env[1139]: time="2023-10-02T19:03:00.487601952Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2477 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:00.488167 env[1139]: time="2023-10-02T19:03:00.488100681Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 19:03:00.488486 env[1139]: time="2023-10-02T19:03:00.488438607Z" level=error msg="Failed to pipe stdout of container \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" error="reading from a closed fifo" Oct 2 19:03:00.488562 env[1139]: time="2023-10-02T19:03:00.488536328Z" level=error msg="Failed to pipe stderr of container \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" error="reading from a closed fifo" Oct 2 19:03:00.492717 env[1139]: time="2023-10-02T19:03:00.492666839Z" level=error msg="StartContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:00.493657 kubelet[2040]: E1002 19:03:00.492977 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158" Oct 2 19:03:00.493657 kubelet[2040]: E1002 19:03:00.493118 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:00.493657 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:00.493657 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:03:00.494852 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:00.495083 kubelet[2040]: E1002 19:03:00.493154 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:01.174982 env[1139]: time="2023-10-02T19:03:01.174937077Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:03:01.176352 env[1139]: time="2023-10-02T19:03:01.176316219Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:03:01.178122 env[1139]: time="2023-10-02T19:03:01.178090488Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:03:01.179330 env[1139]: time="2023-10-02T19:03:01.179285428Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 19:03:01.183144 env[1139]: time="2023-10-02T19:03:01.183085650Z" level=info msg="CreateContainer within sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:03:01.194450 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1068104149.mount: Deactivated successfully. Oct 2 19:03:01.196228 env[1139]: time="2023-10-02T19:03:01.196186064Z" level=info msg="CreateContainer within sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\"" Oct 2 19:03:01.200468 env[1139]: time="2023-10-02T19:03:01.200426213Z" level=info msg="StartContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\"" Oct 2 19:03:01.221124 systemd[1]: Started cri-containerd-ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990.scope. Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259346 kernel: kauditd_printk_skb: 358 callbacks suppressed Oct 2 19:03:01.259437 kernel: audit: type=1400 audit(1696273381.257:1081): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263916 kernel: audit: type=1400 audit(1696273381.257:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.264000 kernel: audit: type=1400 audit(1696273381.257:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.268541 kernel: audit: type=1400 audit(1696273381.257:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.268625 kernel: audit: type=1400 audit(1696273381.257:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.270774 kernel: audit: type=1400 audit(1696273381.257:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.275393 kernel: audit: type=1400 audit(1696273381.257:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.275468 kernel: audit: type=1400 audit(1696273381.257:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.279873 kernel: audit: type=1400 audit(1696273381.257:1089): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.279945 kernel: audit: type=1400 audit(1696273381.259:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit: BPF prog-id=124 op=LOAD Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2376 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:01.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363839323334623639316637356463653264653039323230633630 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2376 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:01.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363839323334623639316637356463653264653039323230633630 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.259000 audit: BPF prog-id=125 op=LOAD Oct 2 19:03:01.259000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2376 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:01.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363839323334623639316637356463653264653039323230633630 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.261000 audit: BPF prog-id=126 op=LOAD Oct 2 19:03:01.261000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2376 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:01.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363839323334623639316637356463653264653039323230633630 Oct 2 19:03:01.263000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:03:01.263000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:03:01.263000 audit: BPF prog-id=127 op=LOAD Oct 2 19:03:01.263000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2376 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:01.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363839323334623639316637356463653264653039323230633630 Oct 2 19:03:01.304225 env[1139]: time="2023-10-02T19:03:01.304179988Z" level=info msg="StartContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" returns successfully" Oct 2 19:03:01.375000 audit[2507]: AVC avc: denied { map_create } for pid=2507 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c653 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c653 tclass=bpf permissive=0 Oct 2 19:03:01.375000 audit[2507]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000695768 a2=48 a3=0 items=0 ppid=2376 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c653 key=(null) Oct 2 19:03:01.375000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:03:01.383047 kubelet[2040]: E1002 19:03:01.382489 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:01.384771 kubelet[2040]: I1002 19:03:01.384748 2040 scope.go:115] "RemoveContainer" containerID="f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59" Oct 2 19:03:01.385505 kubelet[2040]: I1002 19:03:01.385424 2040 scope.go:115] "RemoveContainer" containerID="f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59" Oct 2 19:03:01.387216 env[1139]: time="2023-10-02T19:03:01.387166904Z" level=info msg="RemoveContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" Oct 2 19:03:01.388216 env[1139]: time="2023-10-02T19:03:01.388173521Z" level=info msg="RemoveContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\"" Oct 2 19:03:01.388310 env[1139]: time="2023-10-02T19:03:01.388272002Z" level=error msg="RemoveContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\" failed" error="failed to set removing state for container \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\": container is already in removing state" Oct 2 19:03:01.388614 kubelet[2040]: E1002 19:03:01.388502 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\": container is already in removing state" containerID="f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59" Oct 2 19:03:01.388614 kubelet[2040]: E1002 19:03:01.388547 2040 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59": container is already in removing state; Skipping pod "cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)" Oct 2 19:03:01.388614 kubelet[2040]: E1002 19:03:01.388610 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:01.388875 kubelet[2040]: E1002 19:03:01.388849 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:01.390299 env[1139]: time="2023-10-02T19:03:01.390243354Z" level=info msg="RemoveContainer for \"f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59\" returns successfully" Oct 2 19:03:01.407510 kubelet[2040]: I1002 19:03:01.407462 2040 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-29zdg" podStartSLOduration=-9.223372027447351e+09 pod.CreationTimestamp="2023-10-02 19:02:52 +0000 UTC" firstStartedPulling="2023-10-02 19:02:53.590314436 +0000 UTC m=+16.421069745" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:03:01.393703011 +0000 UTC m=+24.224458320" watchObservedRunningTime="2023-10-02 19:03:01.407424635 +0000 UTC m=+24.238179904" Oct 2 19:03:02.387872 kubelet[2040]: E1002 19:03:02.387847 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:02.388467 kubelet[2040]: E1002 19:03:02.388298 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:02.388718 kubelet[2040]: E1002 19:03:02.388702 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:03.023901 kubelet[2040]: W1002 19:03:03.023842 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59.scope WatchSource:0}: container "f04b0b5f81e544d30b8d906bc45349e8d0f525345fe1ad1eab5d0d79aa6aef59" in namespace "k8s.io": not found Oct 2 19:03:06.132984 kubelet[2040]: W1002 19:03:06.132925 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158.scope WatchSource:0}: task 85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158 not found: not found Oct 2 19:03:07.423875 kubelet[2040]: I1002 19:03:07.423830 2040 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:03:07.425867 kubelet[2040]: I1002 19:03:07.425493 2040 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:03:07.428183 kubelet[2040]: I1002 19:03:07.428157 2040 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:03:07.429814 kubelet[2040]: I1002 19:03:07.429795 2040 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0" size=13423150 Oct 2 19:03:07.430098 env[1139]: time="2023-10-02T19:03:07.430063009Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 19:03:07.459570 env[1139]: time="2023-10-02T19:03:07.459501038Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:03:07.460235 env[1139]: time="2023-10-02T19:03:07.460169246Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:03:07.460669 env[1139]: time="2023-10-02T19:03:07.460652293Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,XXX_unrecognized:[],}" Oct 2 19:03:07.473430 env[1139]: time="2023-10-02T19:03:07.472134444Z" level=info msg="RemoveImage \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\" returns successfully" Oct 2 19:03:07.473430 env[1139]: time="2023-10-02T19:03:07.472583650Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 19:03:07.473630 kubelet[2040]: I1002 19:03:07.472374 2040 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 19:03:07.473816 env[1139]: time="2023-10-02T19:03:07.473673345Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:03:07.474801 env[1139]: time="2023-10-02T19:03:07.474767679Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:03:07.475297 env[1139]: time="2023-10-02T19:03:07.475272086Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 19:03:07.477549 env[1139]: time="2023-10-02T19:03:07.477509835Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 19:03:07.477726 kubelet[2040]: I1002 19:03:07.477697 2040 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb" size=80539316 Oct 2 19:03:07.477924 env[1139]: time="2023-10-02T19:03:07.477891320Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 19:03:07.478742 env[1139]: time="2023-10-02T19:03:07.478693931Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:03:07.479230 env[1139]: time="2023-10-02T19:03:07.479206698Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:03:07.479707 env[1139]: time="2023-10-02T19:03:07.479680544Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,XXX_unrecognized:[],}" Oct 2 19:03:07.535226 env[1139]: time="2023-10-02T19:03:07.535179556Z" level=info msg="RemoveImage \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\" returns successfully" Oct 2 19:03:07.545070 kubelet[2040]: I1002 19:03:07.545047 2040 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:03:15.337368 kubelet[2040]: E1002 19:03:15.336307 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:15.342362 env[1139]: time="2023-10-02T19:03:15.340756005Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:03:15.354621 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3964380101.mount: Deactivated successfully. Oct 2 19:03:15.357119 env[1139]: time="2023-10-02T19:03:15.357077537Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" Oct 2 19:03:15.357737 env[1139]: time="2023-10-02T19:03:15.357711784Z" level=info msg="StartContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" Oct 2 19:03:15.380803 systemd[1]: Started cri-containerd-0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413.scope. Oct 2 19:03:15.428927 systemd[1]: cri-containerd-0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413.scope: Deactivated successfully. Oct 2 19:03:15.432674 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413-rootfs.mount: Deactivated successfully. Oct 2 19:03:15.445446 env[1139]: time="2023-10-02T19:03:15.445386386Z" level=info msg="shim disconnected" id=0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413 Oct 2 19:03:15.445446 env[1139]: time="2023-10-02T19:03:15.445445146Z" level=warning msg="cleaning up after shim disconnected" id=0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413 namespace=k8s.io Oct 2 19:03:15.445723 env[1139]: time="2023-10-02T19:03:15.445457026Z" level=info msg="cleaning up dead shim" Oct 2 19:03:15.455645 env[1139]: time="2023-10-02T19:03:15.455503532Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2554 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:15.455835 env[1139]: time="2023-10-02T19:03:15.455755815Z" level=error msg="copy shim log" error="read /proc/self/fd/63: file already closed" Oct 2 19:03:15.456266 env[1139]: time="2023-10-02T19:03:15.456227420Z" level=error msg="Failed to pipe stdout of container \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" error="reading from a closed fifo" Oct 2 19:03:15.456745 env[1139]: time="2023-10-02T19:03:15.456690425Z" level=error msg="Failed to pipe stderr of container \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" error="reading from a closed fifo" Oct 2 19:03:15.458817 env[1139]: time="2023-10-02T19:03:15.458765606Z" level=error msg="StartContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:15.459041 kubelet[2040]: E1002 19:03:15.459011 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413" Oct 2 19:03:15.459257 kubelet[2040]: E1002 19:03:15.459130 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:15.459257 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:15.459257 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:03:15.459257 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:15.459510 kubelet[2040]: E1002 19:03:15.459166 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:16.421469 kubelet[2040]: I1002 19:03:16.421441 2040 scope.go:115] "RemoveContainer" containerID="85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158" Oct 2 19:03:16.422190 kubelet[2040]: I1002 19:03:16.422170 2040 scope.go:115] "RemoveContainer" containerID="85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158" Oct 2 19:03:16.423499 env[1139]: time="2023-10-02T19:03:16.423459406Z" level=info msg="RemoveContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" Oct 2 19:03:16.424065 env[1139]: time="2023-10-02T19:03:16.423962811Z" level=info msg="RemoveContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\"" Oct 2 19:03:16.424254 env[1139]: time="2023-10-02T19:03:16.424218894Z" level=error msg="RemoveContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\" failed" error="failed to set removing state for container \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\": container is already in removing state" Oct 2 19:03:16.425026 kubelet[2040]: E1002 19:03:16.424365 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\": container is already in removing state" containerID="85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158" Oct 2 19:03:16.425096 kubelet[2040]: E1002 19:03:16.425063 2040 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158": container is already in removing state; Skipping pod "cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)" Oct 2 19:03:16.425143 kubelet[2040]: E1002 19:03:16.425123 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:16.425360 kubelet[2040]: E1002 19:03:16.425344 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:16.428094 env[1139]: time="2023-10-02T19:03:16.427707170Z" level=info msg="RemoveContainer for \"85ed0eb7b1da6ca88074634481d1fe27c4f9d62ff37cb4abc544ec43349a6158\" returns successfully" Oct 2 19:03:18.549908 kubelet[2040]: W1002 19:03:18.549871 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413.scope WatchSource:0}: task 0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413 not found: not found Oct 2 19:03:28.336095 kubelet[2040]: E1002 19:03:28.336062 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:28.336480 kubelet[2040]: E1002 19:03:28.336292 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:34.197000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.202808 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:03:34.202927 kernel: audit: type=1400 audit(1696273414.197:1100): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.202960 kernel: audit: type=1300 audit(1696273414.197:1100): arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=400b25c920 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.197000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=400b25c920 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.197000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.210321 kernel: audit: type=1327 audit(1696273414.197:1100): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.210389 kernel: audit: type=1400 audit(1696273414.198:1101): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.198000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.198000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4007109ef0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.217686 kernel: audit: type=1300 audit(1696273414.198:1101): arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4007109ef0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.198000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.221380 kernel: audit: type=1327 audit(1696273414.198:1101): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.221491 kernel: audit: type=1400 audit(1696273414.198:1102): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.198000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.198000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4007e5a030 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.228695 kernel: audit: type=1300 audit(1696273414.198:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4007e5a030 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.228779 kernel: audit: type=1327 audit(1696273414.198:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.198000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.199000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.235012 kernel: audit: type=1400 audit(1696273414.199:1103): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.199000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4007e8c750 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.211000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.211000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5c a1=40077ff020 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.211000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.211000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5c a1=400b284620 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:03:34.211000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:03:34.516000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.516000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001719d10 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:34.516000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:34.516000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:34.516000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013cccc0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:34.516000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:42.335767 kubelet[2040]: E1002 19:03:42.335724 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:42.338647 env[1139]: time="2023-10-02T19:03:42.338594460Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:03:42.353059 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3895752564.mount: Deactivated successfully. Oct 2 19:03:42.359208 env[1139]: time="2023-10-02T19:03:42.359078894Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" Oct 2 19:03:42.359727 env[1139]: time="2023-10-02T19:03:42.359669593Z" level=info msg="StartContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" Oct 2 19:03:42.377433 systemd[1]: Started cri-containerd-6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7.scope. Oct 2 19:03:42.433687 systemd[1]: cri-containerd-6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7.scope: Deactivated successfully. Oct 2 19:03:42.483887 env[1139]: time="2023-10-02T19:03:42.483835120Z" level=info msg="shim disconnected" id=6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7 Oct 2 19:03:42.484160 env[1139]: time="2023-10-02T19:03:42.484140729Z" level=warning msg="cleaning up after shim disconnected" id=6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7 namespace=k8s.io Oct 2 19:03:42.484231 env[1139]: time="2023-10-02T19:03:42.484218012Z" level=info msg="cleaning up dead shim" Oct 2 19:03:42.493776 env[1139]: time="2023-10-02T19:03:42.493731106Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:03:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2597 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:03:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:03:42.494205 env[1139]: time="2023-10-02T19:03:42.494151439Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:03:42.498135 env[1139]: time="2023-10-02T19:03:42.498096282Z" level=error msg="Failed to pipe stderr of container \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" error="reading from a closed fifo" Oct 2 19:03:42.498305 env[1139]: time="2023-10-02T19:03:42.498263607Z" level=error msg="Failed to pipe stdout of container \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" error="reading from a closed fifo" Oct 2 19:03:42.499944 env[1139]: time="2023-10-02T19:03:42.499896937Z" level=error msg="StartContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:03:42.500284 kubelet[2040]: E1002 19:03:42.500258 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7" Oct 2 19:03:42.500394 kubelet[2040]: E1002 19:03:42.500382 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:03:42.500394 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:03:42.500394 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:03:42.500394 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:03:42.500521 kubelet[2040]: E1002 19:03:42.500425 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:43.350620 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7-rootfs.mount: Deactivated successfully. Oct 2 19:03:43.471790 kubelet[2040]: I1002 19:03:43.471684 2040 scope.go:115] "RemoveContainer" containerID="0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413" Oct 2 19:03:43.472119 kubelet[2040]: I1002 19:03:43.471990 2040 scope.go:115] "RemoveContainer" containerID="0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413" Oct 2 19:03:43.473976 env[1139]: time="2023-10-02T19:03:43.473941283Z" level=info msg="RemoveContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" Oct 2 19:03:43.474231 env[1139]: time="2023-10-02T19:03:43.474143169Z" level=info msg="RemoveContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\"" Oct 2 19:03:43.474263 env[1139]: time="2023-10-02T19:03:43.474228412Z" level=error msg="RemoveContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\" failed" error="failed to set removing state for container \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\": container is already in removing state" Oct 2 19:03:43.474440 kubelet[2040]: E1002 19:03:43.474379 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\": container is already in removing state" containerID="0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413" Oct 2 19:03:43.474440 kubelet[2040]: E1002 19:03:43.474412 2040 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413": container is already in removing state; Skipping pod "cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)" Oct 2 19:03:43.474542 kubelet[2040]: E1002 19:03:43.474476 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:43.474986 kubelet[2040]: E1002 19:03:43.474703 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:43.476654 env[1139]: time="2023-10-02T19:03:43.476617844Z" level=info msg="RemoveContainer for \"0cba7477427535870da19eb05341543e8fcb2a99cf2290d0a8f372b96b20d413\" returns successfully" Oct 2 19:03:45.588692 kubelet[2040]: W1002 19:03:45.588652 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7.scope WatchSource:0}: task 6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7 not found: not found Oct 2 19:03:47.105467 systemd[1]: Started sshd@7-10.0.0.86:22-10.0.0.1:58608.service. Oct 2 19:03:47.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.86:22-10.0.0.1:58608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:47.106532 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:03:47.106603 kernel: audit: type=1130 audit(1696273427.104:1108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.86:22-10.0.0.1:58608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:47.164000 audit[2610]: USER_ACCT pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.167908 sshd[2610]: Accepted publickey for core from 10.0.0.1 port 58608 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:03:47.167000 audit[2610]: CRED_ACQ pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.171944 kernel: audit: type=1101 audit(1696273427.164:1109): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.172037 kernel: audit: type=1103 audit(1696273427.167:1110): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.172067 kernel: audit: type=1006 audit(1696273427.167:1111): pid=2610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:03:47.172181 sshd[2610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:47.167000 audit[2610]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dc1210 a2=3 a3=1 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:47.177434 kernel: audit: type=1300 audit(1696273427.167:1111): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dc1210 a2=3 a3=1 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:47.177503 kernel: audit: type=1327 audit(1696273427.167:1111): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:47.167000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:47.180343 systemd-logind[1125]: New session 8 of user core. Oct 2 19:03:47.181279 systemd[1]: Started session-8.scope. Oct 2 19:03:47.184000 audit[2610]: USER_START pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.185000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.191893 kernel: audit: type=1105 audit(1696273427.184:1112): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.191952 kernel: audit: type=1103 audit(1696273427.185:1113): pid=2612 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.319060 sshd[2610]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:47.319000 audit[2610]: USER_END pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.322026 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:03:47.322621 systemd[1]: sshd@7-10.0.0.86:22-10.0.0.1:58608.service: Deactivated successfully. Oct 2 19:03:47.323571 systemd-logind[1125]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:03:47.319000 audit[2610]: CRED_DISP pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.324212 systemd-logind[1125]: Removed session 8. Oct 2 19:03:47.327103 kernel: audit: type=1106 audit(1696273427.319:1114): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.327200 kernel: audit: type=1104 audit(1696273427.319:1115): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:47.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.86:22-10.0.0.1:58608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:47.748000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:47.748000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400126c1e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:47.748000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:47.748000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:47.748000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400126c200 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:47.748000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40010dd840 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:03:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40010dd860 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:03:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:03:49.336166 kubelet[2040]: E1002 19:03:49.336130 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:55.337210 kubelet[2040]: E1002 19:03:55.337166 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:03:55.337556 kubelet[2040]: E1002 19:03:55.337393 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:03:57.324316 systemd[1]: Started sshd@8-10.0.0.86:22-10.0.0.1:54682.service. Oct 2 19:03:57.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.86:22-10.0.0.1:54682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:57.344066 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:03:57.344189 kernel: audit: type=1130 audit(1696273437.324:1121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.86:22-10.0.0.1:54682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:57.376000 audit[2627]: USER_ACCT pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.377580 sshd[2627]: Accepted publickey for core from 10.0.0.1 port 54682 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:03:57.378813 sshd[2627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:03:57.377000 audit[2627]: CRED_ACQ pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.383935 kernel: audit: type=1101 audit(1696273437.376:1122): pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.384031 kernel: audit: type=1103 audit(1696273437.377:1123): pid=2627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.384056 kernel: audit: type=1006 audit(1696273437.377:1124): pid=2627 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:03:57.383962 systemd[1]: Started session-9.scope. Oct 2 19:03:57.384451 systemd-logind[1125]: New session 9 of user core. Oct 2 19:03:57.377000 audit[2627]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8a80c80 a2=3 a3=1 items=0 ppid=1 pid=2627 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:57.389210 kernel: audit: type=1300 audit(1696273437.377:1124): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8a80c80 a2=3 a3=1 items=0 ppid=1 pid=2627 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:03:57.389277 kernel: audit: type=1327 audit(1696273437.377:1124): proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:57.377000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:03:57.388000 audit[2627]: USER_START pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.393754 kernel: audit: type=1105 audit(1696273437.388:1125): pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.393820 kernel: audit: type=1103 audit(1696273437.389:1126): pid=2629 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.389000 audit[2629]: CRED_ACQ pid=2629 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.516744 sshd[2627]: pam_unix(sshd:session): session closed for user core Oct 2 19:03:57.516000 audit[2627]: USER_END pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.519493 systemd[1]: sshd@8-10.0.0.86:22-10.0.0.1:54682.service: Deactivated successfully. Oct 2 19:03:57.520262 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:03:57.521161 systemd-logind[1125]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:03:57.516000 audit[2627]: CRED_DISP pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.521998 systemd-logind[1125]: Removed session 9. Oct 2 19:03:57.524176 kernel: audit: type=1106 audit(1696273437.516:1127): pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.524245 kernel: audit: type=1104 audit(1696273437.516:1128): pid=2627 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:03:57.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.86:22-10.0.0.1:54682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:03:58.336547 kubelet[2040]: E1002 19:03:58.336502 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:06.336158 kubelet[2040]: E1002 19:04:06.335827 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:06.336158 kubelet[2040]: E1002 19:04:06.336095 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:07.523284 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:07.523401 kernel: audit: type=1130 audit(1696273447.520:1130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.86:22-10.0.0.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:07.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.86:22-10.0.0.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:07.521773 systemd[1]: Started sshd@9-10.0.0.86:22-10.0.0.1:57194.service. Oct 2 19:04:07.567000 audit[2641]: USER_ACCT pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.568367 sshd[2641]: Accepted publickey for core from 10.0.0.1 port 57194 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:07.570000 audit[2641]: CRED_ACQ pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.571843 sshd[2641]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:07.576248 kernel: audit: type=1101 audit(1696273447.567:1131): pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.576335 kernel: audit: type=1103 audit(1696273447.570:1132): pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.576358 kernel: audit: type=1006 audit(1696273447.570:1133): pid=2641 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:04:07.577095 systemd-logind[1125]: New session 10 of user core. Oct 2 19:04:07.577523 systemd[1]: Started session-10.scope. Oct 2 19:04:07.570000 audit[2641]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdad61f40 a2=3 a3=1 items=0 ppid=1 pid=2641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:07.583679 kernel: audit: type=1300 audit(1696273447.570:1133): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdad61f40 a2=3 a3=1 items=0 ppid=1 pid=2641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:07.583794 kernel: audit: type=1327 audit(1696273447.570:1133): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:07.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:07.583000 audit[2641]: USER_START pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.593031 kernel: audit: type=1105 audit(1696273447.583:1134): pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.593654 kernel: audit: type=1103 audit(1696273447.584:1135): pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.584000 audit[2643]: CRED_ACQ pid=2643 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.713366 sshd[2641]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:07.714000 audit[2641]: USER_END pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.716692 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:04:07.717343 systemd[1]: sshd@9-10.0.0.86:22-10.0.0.1:57194.service: Deactivated successfully. Oct 2 19:04:07.714000 audit[2641]: CRED_DISP pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.722200 kernel: audit: type=1106 audit(1696273447.714:1136): pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.722287 kernel: audit: type=1104 audit(1696273447.714:1137): pid=2641 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:07.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.86:22-10.0.0.1:57194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:07.722336 systemd-logind[1125]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:04:07.727118 systemd-logind[1125]: Removed session 10. Oct 2 19:04:14.336350 kubelet[2040]: E1002 19:04:14.336317 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:15.336710 kubelet[2040]: E1002 19:04:15.336668 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:17.336506 kubelet[2040]: E1002 19:04:17.336474 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:17.336917 kubelet[2040]: E1002 19:04:17.336711 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:17.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.86:22-10.0.0.1:57752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:17.718890 systemd[1]: Started sshd@10-10.0.0.86:22-10.0.0.1:57752.service. Oct 2 19:04:17.722486 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:17.722577 kernel: audit: type=1130 audit(1696273457.718:1139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.86:22-10.0.0.1:57752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:17.759695 sshd[2657]: Accepted publickey for core from 10.0.0.1 port 57752 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:17.758000 audit[2657]: USER_ACCT pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.761178 sshd[2657]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:17.759000 audit[2657]: CRED_ACQ pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.764964 systemd-logind[1125]: New session 11 of user core. Oct 2 19:04:17.765807 systemd[1]: Started session-11.scope. Oct 2 19:04:17.767477 kernel: audit: type=1101 audit(1696273457.758:1140): pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.767548 kernel: audit: type=1103 audit(1696273457.759:1141): pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.767569 kernel: audit: type=1006 audit(1696273457.759:1142): pid=2657 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:04:17.769533 kernel: audit: type=1300 audit(1696273457.759:1142): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8fa1b60 a2=3 a3=1 items=0 ppid=1 pid=2657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:17.759000 audit[2657]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8fa1b60 a2=3 a3=1 items=0 ppid=1 pid=2657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:17.759000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:17.774147 kernel: audit: type=1327 audit(1696273457.759:1142): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:17.774207 kernel: audit: type=1105 audit(1696273457.769:1143): pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.769000 audit[2657]: USER_START pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.770000 audit[2659]: CRED_ACQ pid=2659 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.782730 kernel: audit: type=1103 audit(1696273457.770:1144): pid=2659 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.879911 sshd[2657]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:17.879000 audit[2657]: USER_END pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.882486 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:04:17.883151 systemd-logind[1125]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:04:17.883302 systemd[1]: sshd@10-10.0.0.86:22-10.0.0.1:57752.service: Deactivated successfully. Oct 2 19:04:17.884284 systemd-logind[1125]: Removed session 11. Oct 2 19:04:17.885081 kernel: audit: type=1106 audit(1696273457.879:1145): pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.885145 kernel: audit: type=1104 audit(1696273457.880:1146): pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.880000 audit[2657]: CRED_DISP pid=2657 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:17.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.86:22-10.0.0.1:57752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:20.336099 kubelet[2040]: E1002 19:04:20.336069 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:27.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.86:22-10.0.0.1:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.884414 systemd[1]: Started sshd@11-10.0.0.86:22-10.0.0.1:34978.service. Oct 2 19:04:27.885376 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:27.885444 kernel: audit: type=1130 audit(1696273467.883:1148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.86:22-10.0.0.1:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:27.927154 sshd[2673]: Accepted publickey for core from 10.0.0.1 port 34978 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:27.926000 audit[2673]: USER_ACCT pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.929067 sshd[2673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:27.927000 audit[2673]: CRED_ACQ pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.932691 systemd-logind[1125]: New session 12 of user core. Oct 2 19:04:27.933566 systemd[1]: Started session-12.scope. Oct 2 19:04:27.934138 kernel: audit: type=1101 audit(1696273467.926:1149): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.934169 kernel: audit: type=1103 audit(1696273467.927:1150): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.934188 kernel: audit: type=1006 audit(1696273467.927:1151): pid=2673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:04:27.936257 kernel: audit: type=1300 audit(1696273467.927:1151): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8028d60 a2=3 a3=1 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.927000 audit[2673]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8028d60 a2=3 a3=1 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:27.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.940980 kernel: audit: type=1327 audit(1696273467.927:1151): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:27.941041 kernel: audit: type=1105 audit(1696273467.936:1152): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.936000 audit[2673]: USER_START pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.938000 audit[2675]: CRED_ACQ pid=2675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:27.948259 kernel: audit: type=1103 audit(1696273467.938:1153): pid=2675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:28.046463 sshd[2673]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:28.046000 audit[2673]: USER_END pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:28.048927 systemd[1]: sshd@11-10.0.0.86:22-10.0.0.1:34978.service: Deactivated successfully. Oct 2 19:04:28.049672 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:04:28.050203 systemd-logind[1125]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:04:28.050914 systemd-logind[1125]: Removed session 12. Oct 2 19:04:28.046000 audit[2673]: CRED_DISP pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:28.054081 kernel: audit: type=1106 audit(1696273468.046:1154): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:28.054160 kernel: audit: type=1104 audit(1696273468.046:1155): pid=2673 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:28.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.86:22-10.0.0.1:34978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:28.336154 kubelet[2040]: E1002 19:04:28.336122 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:28.338615 env[1139]: time="2023-10-02T19:04:28.338568327Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:04:28.348547 env[1139]: time="2023-10-02T19:04:28.348505031Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" Oct 2 19:04:28.349106 env[1139]: time="2023-10-02T19:04:28.349083279Z" level=info msg="StartContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" Oct 2 19:04:28.369283 systemd[1]: Started cri-containerd-586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b.scope. Oct 2 19:04:28.420753 systemd[1]: cri-containerd-586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b.scope: Deactivated successfully. Oct 2 19:04:28.433896 env[1139]: time="2023-10-02T19:04:28.433847748Z" level=info msg="shim disconnected" id=586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b Oct 2 19:04:28.433896 env[1139]: time="2023-10-02T19:04:28.433895308Z" level=warning msg="cleaning up after shim disconnected" id=586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b namespace=k8s.io Oct 2 19:04:28.434239 env[1139]: time="2023-10-02T19:04:28.433906868Z" level=info msg="cleaning up dead shim" Oct 2 19:04:28.446732 env[1139]: time="2023-10-02T19:04:28.446666293Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:04:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2710 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:04:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:04:28.446972 env[1139]: time="2023-10-02T19:04:28.446924537Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:04:28.447975 env[1139]: time="2023-10-02T19:04:28.447920831Z" level=error msg="Failed to pipe stdout of container \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" error="reading from a closed fifo" Oct 2 19:04:28.448079 env[1139]: time="2023-10-02T19:04:28.447996433Z" level=error msg="Failed to pipe stderr of container \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" error="reading from a closed fifo" Oct 2 19:04:28.450948 env[1139]: time="2023-10-02T19:04:28.450899595Z" level=error msg="StartContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:04:28.451374 kubelet[2040]: E1002 19:04:28.451175 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b" Oct 2 19:04:28.451374 kubelet[2040]: E1002 19:04:28.451314 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:04:28.451374 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:04:28.451374 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:04:28.451565 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:04:28.451618 kubelet[2040]: E1002 19:04:28.451350 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:28.560531 kubelet[2040]: I1002 19:04:28.560502 2040 scope.go:115] "RemoveContainer" containerID="6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7" Oct 2 19:04:28.560875 kubelet[2040]: I1002 19:04:28.560845 2040 scope.go:115] "RemoveContainer" containerID="6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7" Oct 2 19:04:28.562226 env[1139]: time="2023-10-02T19:04:28.562184527Z" level=info msg="RemoveContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" Oct 2 19:04:28.563239 env[1139]: time="2023-10-02T19:04:28.563175461Z" level=info msg="RemoveContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\"" Oct 2 19:04:28.563369 env[1139]: time="2023-10-02T19:04:28.563284823Z" level=error msg="RemoveContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\" failed" error="failed to set removing state for container \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\": container is already in removing state" Oct 2 19:04:28.563915 kubelet[2040]: E1002 19:04:28.563796 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\": container is already in removing state" containerID="6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7" Oct 2 19:04:28.563975 kubelet[2040]: I1002 19:04:28.563940 2040 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7} err="rpc error: code = Unknown desc = failed to set removing state for container \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\": container is already in removing state" Oct 2 19:04:28.566203 env[1139]: time="2023-10-02T19:04:28.566172305Z" level=info msg="RemoveContainer for \"6e492483d9f80c2af38704efd9d66f983db37dcf0d83fe817f40a972cfdd16f7\" returns successfully" Oct 2 19:04:28.566372 kubelet[2040]: E1002 19:04:28.566349 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:28.566604 kubelet[2040]: E1002 19:04:28.566588 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:29.346719 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b-rootfs.mount: Deactivated successfully. Oct 2 19:04:31.538994 kubelet[2040]: W1002 19:04:31.538956 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b.scope WatchSource:0}: task 586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b not found: not found Oct 2 19:04:34.199000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.201243 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:04:34.201284 kernel: audit: type=1400 audit(1696273474.199:1157): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.199000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4007bffc80 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.209072 kernel: audit: type=1300 audit(1696273474.199:1157): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4007bffc80 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.209146 kernel: audit: type=1327 audit(1696273474.199:1157): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.199000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.217301 kernel: audit: type=1400 audit(1696273474.199:1159): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.217539 kernel: audit: type=1300 audit(1696273474.199:1159): arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4007189b60 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.199000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4007189b60 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.221077 kernel: audit: type=1327 audit(1696273474.199:1159): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.199000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.227293 kernel: audit: type=1400 audit(1696273474.199:1158): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.227346 kernel: audit: type=1300 audit(1696273474.199:1158): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4001a41760 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.199000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4001a41760 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.199000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.234942 kernel: audit: type=1327 audit(1696273474.199:1158): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.235002 kernel: audit: type=1400 audit(1696273474.200:1160): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.200000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.200000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40073c8ea0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.200000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.212000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.212000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4001a5ede0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.212000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.216000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.216000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40072612c0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:04:34.216000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:04:34.517000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.517000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40014489e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:34.517000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:34.517000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:34.517000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017fe1e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:34.517000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:37.290334 kubelet[2040]: E1002 19:04:37.290290 2040 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:04:37.373056 kubelet[2040]: E1002 19:04:37.373026 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:38.051882 systemd[1]: Started sshd@12-10.0.0.86:22-10.0.0.1:42392.service. Oct 2 19:04:38.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.86:22-10.0.0.1:42392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:38.089000 audit[2727]: USER_ACCT pid=2727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.090923 sshd[2727]: Accepted publickey for core from 10.0.0.1 port 42392 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:38.090000 audit[2727]: CRED_ACQ pid=2727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.090000 audit[2727]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5500760 a2=3 a3=1 items=0 ppid=1 pid=2727 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:38.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:38.092220 sshd[2727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:38.099430 systemd-logind[1125]: New session 13 of user core. Oct 2 19:04:38.099787 systemd[1]: Started session-13.scope. Oct 2 19:04:38.105000 audit[2727]: USER_START pid=2727 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.106000 audit[2729]: CRED_ACQ pid=2729 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.222110 sshd[2727]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:38.221000 audit[2727]: USER_END pid=2727 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.222000 audit[2727]: CRED_DISP pid=2727 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:38.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.86:22-10.0.0.1:42392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:38.225827 systemd[1]: sshd@12-10.0.0.86:22-10.0.0.1:42392.service: Deactivated successfully. Oct 2 19:04:38.226559 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:04:38.227459 systemd-logind[1125]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:04:38.229935 systemd-logind[1125]: Removed session 13. Oct 2 19:04:41.336479 kubelet[2040]: E1002 19:04:41.336447 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:41.337077 kubelet[2040]: E1002 19:04:41.337057 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:42.373640 kubelet[2040]: E1002 19:04:42.373616 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:47.375497 kubelet[2040]: E1002 19:04:47.375465 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.753760 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:04:47.753860 kernel: audit: type=1400 audit(1696273487.749:1175): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.753899 kernel: audit: type=1400 audit(1696273487.749:1174): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=400148e280 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.760815 kernel: audit: type=1300 audit(1696273487.749:1174): arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=400148e280 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.760881 kernel: audit: type=1300 audit(1696273487.749:1175): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001448de0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001448de0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.768022 kernel: audit: type=1327 audit(1696273487.749:1174): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.768089 kernel: audit: type=1327 audit(1696273487.749:1175): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.774310 kernel: audit: type=1400 audit(1696273487.749:1176): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001448f00 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.778287 kernel: audit: type=1300 audit(1696273487.749:1176): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001448f00 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.778349 kernel: audit: type=1327 audit(1696273487.749:1176): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:47.781854 kernel: audit: type=1400 audit(1696273487.749:1177): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:04:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4000276f00 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:04:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:04:48.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.86:22-10.0.0.1:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.227834 systemd[1]: Started sshd@13-10.0.0.86:22-10.0.0.1:56818.service. Oct 2 19:04:48.263000 audit[2741]: USER_ACCT pid=2741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.264669 sshd[2741]: Accepted publickey for core from 10.0.0.1 port 56818 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:48.264000 audit[2741]: CRED_ACQ pid=2741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.264000 audit[2741]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0958e10 a2=3 a3=1 items=0 ppid=1 pid=2741 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:48.264000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:48.265710 sshd[2741]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:48.271248 systemd-logind[1125]: New session 14 of user core. Oct 2 19:04:48.272138 systemd[1]: Started session-14.scope. Oct 2 19:04:48.274000 audit[2741]: USER_START pid=2741 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.276000 audit[2743]: CRED_ACQ pid=2743 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.387970 sshd[2741]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:48.387000 audit[2741]: USER_END pid=2741 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.387000 audit[2741]: CRED_DISP pid=2741 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:48.390186 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:04:48.390802 systemd-logind[1125]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:04:48.390925 systemd[1]: sshd@13-10.0.0.86:22-10.0.0.1:56818.service: Deactivated successfully. Oct 2 19:04:48.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.86:22-10.0.0.1:56818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:48.391870 systemd-logind[1125]: Removed session 14. Oct 2 19:04:52.376147 kubelet[2040]: E1002 19:04:52.376113 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:53.336328 kubelet[2040]: E1002 19:04:53.336301 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:55.336236 kubelet[2040]: E1002 19:04:55.336200 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:04:55.336530 kubelet[2040]: E1002 19:04:55.336416 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:04:57.377931 kubelet[2040]: E1002 19:04:57.377894 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:04:58.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.86:22-10.0.0.1:48438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:58.395543 systemd[1]: Started sshd@14-10.0.0.86:22-10.0.0.1:48438.service. Oct 2 19:04:58.396512 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:04:58.396547 kernel: audit: type=1130 audit(1696273498.395:1187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.86:22-10.0.0.1:48438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:58.437000 audit[2757]: USER_ACCT pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.437587 sshd[2757]: Accepted publickey for core from 10.0.0.1 port 48438 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:04:58.439648 sshd[2757]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:04:58.439000 audit[2757]: CRED_ACQ pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.443806 kernel: audit: type=1101 audit(1696273498.437:1188): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.443853 kernel: audit: type=1103 audit(1696273498.439:1189): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.443882 kernel: audit: type=1006 audit(1696273498.439:1190): pid=2757 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:04:58.446875 kernel: audit: type=1300 audit(1696273498.439:1190): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc82c1cc0 a2=3 a3=1 items=0 ppid=1 pid=2757 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:58.439000 audit[2757]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc82c1cc0 a2=3 a3=1 items=0 ppid=1 pid=2757 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:04:58.449876 kernel: audit: type=1327 audit(1696273498.439:1190): proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:58.439000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:04:58.448211 systemd[1]: Started session-15.scope. Oct 2 19:04:58.449460 systemd-logind[1125]: New session 15 of user core. Oct 2 19:04:58.455000 audit[2757]: USER_START pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.457000 audit[2759]: CRED_ACQ pid=2759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.462129 kernel: audit: type=1105 audit(1696273498.455:1191): pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.462189 kernel: audit: type=1103 audit(1696273498.457:1192): pid=2759 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.585913 sshd[2757]: pam_unix(sshd:session): session closed for user core Oct 2 19:04:58.586000 audit[2757]: USER_END pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.586000 audit[2757]: CRED_DISP pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.593050 kernel: audit: type=1106 audit(1696273498.586:1193): pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.593121 kernel: audit: type=1104 audit(1696273498.586:1194): pid=2757 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:04:58.596194 systemd[1]: sshd@14-10.0.0.86:22-10.0.0.1:48438.service: Deactivated successfully. Oct 2 19:04:58.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.86:22-10.0.0.1:48438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:04:58.597667 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:04:58.598635 systemd-logind[1125]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:04:58.599406 systemd-logind[1125]: Removed session 15. Oct 2 19:05:02.378880 kubelet[2040]: E1002 19:05:02.378808 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:07.379404 kubelet[2040]: E1002 19:05:07.379376 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:08.590580 systemd[1]: Started sshd@15-10.0.0.86:22-10.0.0.1:56198.service. Oct 2 19:05:08.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.86:22-10.0.0.1:56198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:08.596937 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:08.597054 kernel: audit: type=1130 audit(1696273508.589:1196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.86:22-10.0.0.1:56198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:08.627000 audit[2771]: USER_ACCT pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.628391 sshd[2771]: Accepted publickey for core from 10.0.0.1 port 56198 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:08.629656 sshd[2771]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:08.628000 audit[2771]: CRED_ACQ pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.634168 systemd[1]: Started session-16.scope. Oct 2 19:05:08.634472 systemd-logind[1125]: New session 16 of user core. Oct 2 19:05:08.634866 kernel: audit: type=1101 audit(1696273508.627:1197): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.634896 kernel: audit: type=1103 audit(1696273508.628:1198): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.634915 kernel: audit: type=1006 audit(1696273508.628:1199): pid=2771 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:05:08.628000 audit[2771]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b05890 a2=3 a3=1 items=0 ppid=1 pid=2771 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:08.640065 kernel: audit: type=1300 audit(1696273508.628:1199): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b05890 a2=3 a3=1 items=0 ppid=1 pid=2771 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:08.640138 kernel: audit: type=1327 audit(1696273508.628:1199): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:08.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:08.637000 audit[2771]: USER_START pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.644696 kernel: audit: type=1105 audit(1696273508.637:1200): pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.644759 kernel: audit: type=1103 audit(1696273508.639:1201): pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.639000 audit[2773]: CRED_ACQ pid=2773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.778249 sshd[2771]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:08.779000 audit[2771]: USER_END pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.782743 systemd[1]: sshd@15-10.0.0.86:22-10.0.0.1:56198.service: Deactivated successfully. Oct 2 19:05:08.783454 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:05:08.784802 systemd-logind[1125]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:05:08.785821 systemd-logind[1125]: Removed session 16. Oct 2 19:05:08.779000 audit[2771]: CRED_DISP pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.792059 kernel: audit: type=1106 audit(1696273508.779:1202): pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.792126 kernel: audit: type=1104 audit(1696273508.779:1203): pid=2771 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:08.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.86:22-10.0.0.1:56198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:10.337816 kubelet[2040]: E1002 19:05:10.336008 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:10.337816 kubelet[2040]: E1002 19:05:10.336276 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:05:12.386234 kubelet[2040]: E1002 19:05:12.380540 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:17.336096 kubelet[2040]: E1002 19:05:17.336058 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:17.381346 kubelet[2040]: E1002 19:05:17.381324 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:18.780975 systemd[1]: Started sshd@16-10.0.0.86:22-10.0.0.1:48780.service. Oct 2 19:05:18.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.86:22-10.0.0.1:48780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:18.782209 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:18.782248 kernel: audit: type=1130 audit(1696273518.780:1205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.86:22-10.0.0.1:48780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:18.816000 audit[2785]: USER_ACCT pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.817312 sshd[2785]: Accepted publickey for core from 10.0.0.1 port 48780 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:18.819098 sshd[2785]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:18.817000 audit[2785]: CRED_ACQ pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.822991 kernel: audit: type=1101 audit(1696273518.816:1206): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.823089 kernel: audit: type=1103 audit(1696273518.817:1207): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.823114 kernel: audit: type=1006 audit(1696273518.817:1208): pid=2785 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:05:18.823175 systemd-logind[1125]: New session 17 of user core. Oct 2 19:05:18.823454 systemd[1]: Started session-17.scope. Oct 2 19:05:18.817000 audit[2785]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe719a190 a2=3 a3=1 items=0 ppid=1 pid=2785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:18.828390 kernel: audit: type=1300 audit(1696273518.817:1208): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe719a190 a2=3 a3=1 items=0 ppid=1 pid=2785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:18.817000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:18.829512 kernel: audit: type=1327 audit(1696273518.817:1208): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:18.829549 kernel: audit: type=1105 audit(1696273518.827:1209): pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.827000 audit[2785]: USER_START pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.828000 audit[2787]: CRED_ACQ pid=2787 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.835504 kernel: audit: type=1103 audit(1696273518.828:1210): pid=2787 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.936762 sshd[2785]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:18.938000 audit[2785]: USER_END pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.940952 systemd[1]: Started sshd@17-10.0.0.86:22-10.0.0.1:48794.service. Oct 2 19:05:18.941417 systemd[1]: sshd@16-10.0.0.86:22-10.0.0.1:48780.service: Deactivated successfully. Oct 2 19:05:18.942174 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:05:18.942915 systemd-logind[1125]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:05:18.938000 audit[2785]: CRED_DISP pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.943933 systemd-logind[1125]: Removed session 17. Oct 2 19:05:18.945749 kernel: audit: type=1106 audit(1696273518.938:1211): pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.945802 kernel: audit: type=1104 audit(1696273518.938:1212): pid=2785 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.86:22-10.0.0.1:48794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:18.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.86:22-10.0.0.1:48780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:18.975000 audit[2799]: USER_ACCT pid=2799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.977000 sshd[2799]: Accepted publickey for core from 10.0.0.1 port 48794 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:18.977000 audit[2799]: CRED_ACQ pid=2799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.977000 audit[2799]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1509b40 a2=3 a3=1 items=0 ppid=1 pid=2799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:18.977000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:18.978839 sshd[2799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:18.982201 systemd-logind[1125]: New session 18 of user core. Oct 2 19:05:18.983036 systemd[1]: Started session-18.scope. Oct 2 19:05:18.986000 audit[2799]: USER_START pid=2799 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:18.987000 audit[2802]: CRED_ACQ pid=2802 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.337794 kubelet[2040]: E1002 19:05:19.337750 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:19.338705 kubelet[2040]: E1002 19:05:19.338675 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:19.761511 sshd[2799]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:19.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.86:22-10.0.0.1:48798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:19.765605 systemd[1]: Started sshd@18-10.0.0.86:22-10.0.0.1:48798.service. Oct 2 19:05:19.767000 audit[2799]: USER_END pid=2799 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.767000 audit[2799]: CRED_DISP pid=2799 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.770745 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:05:19.771680 systemd[1]: sshd@17-10.0.0.86:22-10.0.0.1:48794.service: Deactivated successfully. Oct 2 19:05:19.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.86:22-10.0.0.1:48794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:19.776947 systemd-logind[1125]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:05:19.777758 systemd-logind[1125]: Removed session 18. Oct 2 19:05:19.806000 audit[2811]: USER_ACCT pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.807922 sshd[2811]: Accepted publickey for core from 10.0.0.1 port 48798 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:19.807000 audit[2811]: CRED_ACQ pid=2811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.807000 audit[2811]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd017ae90 a2=3 a3=1 items=0 ppid=1 pid=2811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:19.807000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:19.809146 sshd[2811]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:19.813866 systemd-logind[1125]: New session 19 of user core. Oct 2 19:05:19.814162 systemd[1]: Started session-19.scope. Oct 2 19:05:19.817000 audit[2811]: USER_START pid=2811 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.819000 audit[2814]: CRED_ACQ pid=2814 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.942685 sshd[2811]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:19.942000 audit[2811]: USER_END pid=2811 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.942000 audit[2811]: CRED_DISP pid=2811 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:19.945385 systemd[1]: sshd@18-10.0.0.86:22-10.0.0.1:48798.service: Deactivated successfully. Oct 2 19:05:19.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.86:22-10.0.0.1:48798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:19.946450 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:05:19.947051 systemd-logind[1125]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:05:19.947863 systemd-logind[1125]: Removed session 19. Oct 2 19:05:22.382842 kubelet[2040]: E1002 19:05:22.382816 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:23.336489 kubelet[2040]: E1002 19:05:23.336458 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:23.336847 kubelet[2040]: E1002 19:05:23.336829 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:05:27.384463 kubelet[2040]: E1002 19:05:27.384435 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:29.947928 systemd[1]: Started sshd@19-10.0.0.86:22-10.0.0.1:58536.service. Oct 2 19:05:29.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.86:22-10.0.0.1:58536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:29.953266 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:05:29.953386 kernel: audit: type=1130 audit(1696273529.947:1232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.86:22-10.0.0.1:58536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:29.987000 audit[2827]: USER_ACCT pid=2827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:29.989199 sshd[2827]: Accepted publickey for core from 10.0.0.1 port 58536 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:29.990768 sshd[2827]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:29.994718 systemd-logind[1125]: New session 20 of user core. Oct 2 19:05:29.995235 systemd[1]: Started session-20.scope. Oct 2 19:05:29.989000 audit[2827]: CRED_ACQ pid=2827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:29.999210 kernel: audit: type=1101 audit(1696273529.987:1233): pid=2827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:29.999275 kernel: audit: type=1103 audit(1696273529.989:1234): pid=2827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:29.999417 kernel: audit: type=1006 audit(1696273529.989:1235): pid=2827 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:05:29.989000 audit[2827]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb597910 a2=3 a3=1 items=0 ppid=1 pid=2827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:30.006142 kernel: audit: type=1300 audit(1696273529.989:1235): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb597910 a2=3 a3=1 items=0 ppid=1 pid=2827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:30.006189 kernel: audit: type=1327 audit(1696273529.989:1235): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:29.989000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:30.007000 audit[2827]: USER_START pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.008000 audit[2829]: CRED_ACQ pid=2829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.014316 kernel: audit: type=1105 audit(1696273530.007:1236): pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.014367 kernel: audit: type=1103 audit(1696273530.008:1237): pid=2829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.142635 sshd[2827]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:30.142000 audit[2827]: USER_END pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.145139 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:05:30.145825 systemd-logind[1125]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:05:30.145924 systemd[1]: sshd@19-10.0.0.86:22-10.0.0.1:58536.service: Deactivated successfully. Oct 2 19:05:30.147166 systemd-logind[1125]: Removed session 20. Oct 2 19:05:30.142000 audit[2827]: CRED_DISP pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.150996 kernel: audit: type=1106 audit(1696273530.142:1238): pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.151100 kernel: audit: type=1104 audit(1696273530.142:1239): pid=2827 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:30.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.86:22-10.0.0.1:58536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:32.385740 kubelet[2040]: E1002 19:05:32.385692 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:34.201000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.201000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40050f31d0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.201000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.201000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40049580f0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.201000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.201000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002a8e6c0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.201000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.201000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40050f3350 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.201000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.219000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.219000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.219000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002a8e7e0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.219000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400ca49ad0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:05:34.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:05:34.518000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.518000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011d7ad0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:34.518000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:34.518000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:34.518000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400126c7e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:34.518000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:35.338244 kubelet[2040]: E1002 19:05:35.338217 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:35.338918 kubelet[2040]: E1002 19:05:35.338894 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:05:37.387154 kubelet[2040]: E1002 19:05:37.387121 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:40.158274 systemd[1]: Started sshd@20-10.0.0.86:22-10.0.0.1:56480.service. Oct 2 19:05:40.159874 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:05:40.159915 kernel: audit: type=1130 audit(1696273540.157:1249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.86:22-10.0.0.1:56480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:40.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.86:22-10.0.0.1:56480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:40.200170 sshd[2842]: Accepted publickey for core from 10.0.0.1 port 56480 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:40.199000 audit[2842]: USER_ACCT pid=2842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.203945 sshd[2842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:40.204170 kernel: audit: type=1101 audit(1696273540.199:1250): pid=2842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.204308 kernel: audit: type=1103 audit(1696273540.202:1251): pid=2842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.202000 audit[2842]: CRED_ACQ pid=2842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.208092 systemd-logind[1125]: New session 21 of user core. Oct 2 19:05:40.209330 kernel: audit: type=1006 audit(1696273540.202:1252): pid=2842 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:05:40.209369 kernel: audit: type=1300 audit(1696273540.202:1252): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb171980 a2=3 a3=1 items=0 ppid=1 pid=2842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:40.202000 audit[2842]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb171980 a2=3 a3=1 items=0 ppid=1 pid=2842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:40.208727 systemd[1]: Started session-21.scope. Oct 2 19:05:40.214227 kernel: audit: type=1327 audit(1696273540.202:1252): proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:40.202000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:40.211000 audit[2842]: USER_START pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.218271 kernel: audit: type=1105 audit(1696273540.211:1253): pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.218329 kernel: audit: type=1103 audit(1696273540.212:1254): pid=2844 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.212000 audit[2844]: CRED_ACQ pid=2844 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.336334 sshd[2842]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:40.336000 audit[2842]: USER_END pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.336000 audit[2842]: CRED_DISP pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.343808 kernel: audit: type=1106 audit(1696273540.336:1255): pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.343857 kernel: audit: type=1104 audit(1696273540.336:1256): pid=2842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:40.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.86:22-10.0.0.1:56480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:40.345004 systemd[1]: sshd@20-10.0.0.86:22-10.0.0.1:56480.service: Deactivated successfully. Oct 2 19:05:40.345733 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:05:40.346263 systemd-logind[1125]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:05:40.347096 systemd-logind[1125]: Removed session 21. Oct 2 19:05:42.388220 kubelet[2040]: E1002 19:05:42.388190 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:47.389641 kubelet[2040]: E1002 19:05:47.389614 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.751163 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:05:47.751257 kernel: audit: type=1400 audit(1696273547.749:1258): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400126cee0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.758244 kernel: audit: type=1300 audit(1696273547.749:1258): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400126cee0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.758339 kernel: audit: type=1327 audit(1696273547.749:1258): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.764568 kernel: audit: type=1400 audit(1696273547.749:1259): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.764722 kernel: audit: type=1300 audit(1696273547.749:1259): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e7f1a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e7f1a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.772602 kernel: audit: type=1327 audit(1696273547.749:1259): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.772684 kernel: audit: type=1400 audit(1696273547.749:1260): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.749000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.749000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400126d000 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.780040 kernel: audit: type=1300 audit(1696273547.749:1260): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400126d000 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.780104 kernel: audit: type=1327 audit(1696273547.749:1260): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.749000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:47.750000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.786750 kernel: audit: type=1400 audit(1696273547.750:1261): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:05:47.750000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e7f460 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:05:47.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:05:48.336433 kubelet[2040]: E1002 19:05:48.336388 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:48.338144 kubelet[2040]: E1002 19:05:48.338082 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:05:48.338321 kubelet[2040]: E1002 19:05:48.338288 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:05:50.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.86:22-10.0.0.1:36706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:50.346374 systemd[1]: Started sshd@21-10.0.0.86:22-10.0.0.1:36706.service. Oct 2 19:05:50.391000 audit[2855]: USER_ACCT pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.393461 sshd[2855]: Accepted publickey for core from 10.0.0.1 port 36706 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:05:50.398000 audit[2855]: CRED_ACQ pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.398000 audit[2855]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2cab7e0 a2=3 a3=1 items=0 ppid=1 pid=2855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:05:50.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:05:50.399441 sshd[2855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:05:50.409318 systemd-logind[1125]: New session 22 of user core. Oct 2 19:05:50.409991 systemd[1]: Started session-22.scope. Oct 2 19:05:50.423000 audit[2855]: USER_START pid=2855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.425000 audit[2857]: CRED_ACQ pid=2857 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.555982 sshd[2855]: pam_unix(sshd:session): session closed for user core Oct 2 19:05:50.556000 audit[2855]: USER_END pid=2855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.556000 audit[2855]: CRED_DISP pid=2855 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:05:50.558896 systemd[1]: sshd@21-10.0.0.86:22-10.0.0.1:36706.service: Deactivated successfully. Oct 2 19:05:50.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.86:22-10.0.0.1:36706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:05:50.559650 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:05:50.560362 systemd-logind[1125]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:05:50.561068 systemd-logind[1125]: Removed session 22. Oct 2 19:05:52.392265 kubelet[2040]: E1002 19:05:52.392234 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:05:57.392814 kubelet[2040]: E1002 19:05:57.392786 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:00.561711 systemd[1]: Started sshd@22-10.0.0.86:22-10.0.0.1:54928.service. Oct 2 19:06:00.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.86:22-10.0.0.1:54928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:00.562560 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:06:00.562622 kernel: audit: type=1130 audit(1696273560.560:1271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.86:22-10.0.0.1:54928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:00.602000 audit[2870]: USER_ACCT pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.603768 sshd[2870]: Accepted publickey for core from 10.0.0.1 port 54928 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:00.606400 sshd[2870]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:00.605000 audit[2870]: CRED_ACQ pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.613920 systemd[1]: Started session-23.scope. Oct 2 19:06:00.614319 systemd-logind[1125]: New session 23 of user core. Oct 2 19:06:00.617997 kernel: audit: type=1101 audit(1696273560.602:1272): pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.618067 kernel: audit: type=1103 audit(1696273560.605:1273): pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.618099 kernel: audit: type=1006 audit(1696273560.605:1274): pid=2870 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:06:00.605000 audit[2870]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfae6340 a2=3 a3=1 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:00.626410 kernel: audit: type=1300 audit(1696273560.605:1274): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfae6340 a2=3 a3=1 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:00.626485 kernel: audit: type=1327 audit(1696273560.605:1274): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:00.605000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:00.617000 audit[2870]: USER_START pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.631107 kernel: audit: type=1105 audit(1696273560.617:1275): pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.631203 kernel: audit: type=1103 audit(1696273560.619:1276): pid=2872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.619000 audit[2872]: CRED_ACQ pid=2872 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.734821 sshd[2870]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:00.738000 audit[2870]: USER_END pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.740601 systemd[1]: sshd@22-10.0.0.86:22-10.0.0.1:54928.service: Deactivated successfully. Oct 2 19:06:00.741354 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:06:00.742071 systemd-logind[1125]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:06:00.738000 audit[2870]: CRED_DISP pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.743347 systemd-logind[1125]: Removed session 23. Oct 2 19:06:00.745706 kernel: audit: type=1106 audit(1696273560.738:1277): pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.745801 kernel: audit: type=1104 audit(1696273560.738:1278): pid=2870 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:00.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.86:22-10.0.0.1:54928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:01.336542 kubelet[2040]: E1002 19:06:01.336211 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:01.338696 env[1139]: time="2023-10-02T19:06:01.338648306Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:06:01.364953 env[1139]: time="2023-10-02T19:06:01.364907222Z" level=info msg="CreateContainer within sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\"" Oct 2 19:06:01.365565 env[1139]: time="2023-10-02T19:06:01.365539496Z" level=info msg="StartContainer for \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\"" Oct 2 19:06:01.382471 systemd[1]: Started cri-containerd-a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4.scope. Oct 2 19:06:01.397039 systemd[1]: cri-containerd-a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4.scope: Deactivated successfully. Oct 2 19:06:01.400921 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4-rootfs.mount: Deactivated successfully. Oct 2 19:06:01.409505 env[1139]: time="2023-10-02T19:06:01.409454967Z" level=info msg="shim disconnected" id=a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4 Oct 2 19:06:01.409753 env[1139]: time="2023-10-02T19:06:01.409730685Z" level=warning msg="cleaning up after shim disconnected" id=a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4 namespace=k8s.io Oct 2 19:06:01.409833 env[1139]: time="2023-10-02T19:06:01.409817764Z" level=info msg="cleaning up dead shim" Oct 2 19:06:01.419677 env[1139]: time="2023-10-02T19:06:01.419631993Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2905 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:01.420123 env[1139]: time="2023-10-02T19:06:01.420067509Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:06:01.420397 env[1139]: time="2023-10-02T19:06:01.420335546Z" level=error msg="Failed to pipe stderr of container \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\"" error="reading from a closed fifo" Oct 2 19:06:01.424058 env[1139]: time="2023-10-02T19:06:01.424001152Z" level=error msg="Failed to pipe stdout of container \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\"" error="reading from a closed fifo" Oct 2 19:06:01.425312 env[1139]: time="2023-10-02T19:06:01.425262860Z" level=error msg="StartContainer for \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:01.425628 kubelet[2040]: E1002 19:06:01.425606 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4" Oct 2 19:06:01.425728 kubelet[2040]: E1002 19:06:01.425711 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:01.425728 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:01.425728 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:06:01.425728 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-nbwfn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:01.425875 kubelet[2040]: E1002 19:06:01.425746 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:06:01.734793 kubelet[2040]: I1002 19:06:01.734746 2040 scope.go:115] "RemoveContainer" containerID="586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b" Oct 2 19:06:01.735123 kubelet[2040]: I1002 19:06:01.735107 2040 scope.go:115] "RemoveContainer" containerID="586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b" Oct 2 19:06:01.736277 env[1139]: time="2023-10-02T19:06:01.736243008Z" level=info msg="RemoveContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" Oct 2 19:06:01.736605 env[1139]: time="2023-10-02T19:06:01.736575085Z" level=info msg="RemoveContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\"" Oct 2 19:06:01.736774 env[1139]: time="2023-10-02T19:06:01.736737923Z" level=error msg="RemoveContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\" failed" error="failed to set removing state for container \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\": container is already in removing state" Oct 2 19:06:01.737034 kubelet[2040]: E1002 19:06:01.737010 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\": container is already in removing state" containerID="586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b" Oct 2 19:06:01.737163 kubelet[2040]: I1002 19:06:01.737151 2040 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b} err="rpc error: code = Unknown desc = failed to set removing state for container \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\": container is already in removing state" Oct 2 19:06:01.739474 env[1139]: time="2023-10-02T19:06:01.739436338Z" level=info msg="RemoveContainer for \"586334a1bb3612773732ab7f604f2b545ad2f8287fb8b00f554fb1e66c84d93b\" returns successfully" Oct 2 19:06:01.739728 kubelet[2040]: E1002 19:06:01.739709 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:01.740089 kubelet[2040]: E1002 19:06:01.740075 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:06:02.394339 kubelet[2040]: E1002 19:06:02.394306 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:04.515510 kubelet[2040]: W1002 19:06:04.515461 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice/cri-containerd-a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4.scope WatchSource:0}: task a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4 not found: not found Oct 2 19:06:07.336176 kubelet[2040]: E1002 19:06:07.336136 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:07.395852 kubelet[2040]: E1002 19:06:07.395825 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:10.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.86:22-10.0.0.1:44600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:10.740463 systemd[1]: Started sshd@23-10.0.0.86:22-10.0.0.1:44600.service. Oct 2 19:06:10.742063 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:10.742160 kernel: audit: type=1130 audit(1696273570.739:1280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.86:22-10.0.0.1:44600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:10.779601 sshd[2919]: Accepted publickey for core from 10.0.0.1 port 44600 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:10.778000 audit[2919]: USER_ACCT pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.781596 sshd[2919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:10.780000 audit[2919]: CRED_ACQ pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.786825 kernel: audit: type=1101 audit(1696273570.778:1281): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.786908 kernel: audit: type=1103 audit(1696273570.780:1282): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.786937 kernel: audit: type=1006 audit(1696273570.780:1283): pid=2919 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:06:10.788082 systemd-logind[1125]: New session 24 of user core. Oct 2 19:06:10.788254 systemd[1]: Started session-24.scope. Oct 2 19:06:10.780000 audit[2919]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6833170 a2=3 a3=1 items=0 ppid=1 pid=2919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:10.792512 kernel: audit: type=1300 audit(1696273570.780:1283): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6833170 a2=3 a3=1 items=0 ppid=1 pid=2919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:10.792650 kernel: audit: type=1327 audit(1696273570.780:1283): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:10.780000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:10.793562 kernel: audit: type=1105 audit(1696273570.791:1284): pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.791000 audit[2919]: USER_START pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.794000 audit[2921]: CRED_ACQ pid=2921 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.800255 kernel: audit: type=1103 audit(1696273570.794:1285): pid=2921 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.912563 sshd[2919]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:10.912000 audit[2919]: USER_END pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.915971 systemd[1]: sshd@23-10.0.0.86:22-10.0.0.1:44600.service: Deactivated successfully. Oct 2 19:06:10.916829 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:06:10.917279 systemd-logind[1125]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:06:10.912000 audit[2919]: CRED_DISP pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.918549 systemd-logind[1125]: Removed session 24. Oct 2 19:06:10.920484 kernel: audit: type=1106 audit(1696273570.912:1286): pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.920551 kernel: audit: type=1104 audit(1696273570.912:1287): pid=2919 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:10.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.86:22-10.0.0.1:44600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:12.398294 kubelet[2040]: E1002 19:06:12.398269 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:14.336698 kubelet[2040]: E1002 19:06:14.336163 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:14.336698 kubelet[2040]: E1002 19:06:14.336399 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:06:17.399253 kubelet[2040]: E1002 19:06:17.399219 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:20.915529 systemd[1]: Started sshd@24-10.0.0.86:22-10.0.0.1:37622.service. Oct 2 19:06:20.919686 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:20.919755 kernel: audit: type=1130 audit(1696273580.914:1289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.86:22-10.0.0.1:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:20.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.86:22-10.0.0.1:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:20.962000 audit[2933]: USER_ACCT pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:20.966257 sshd[2933]: Accepted publickey for core from 10.0.0.1 port 37622 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:20.967086 kernel: audit: type=1101 audit(1696273580.962:1290): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:20.976458 kernel: audit: type=1103 audit(1696273580.966:1291): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:20.976531 kernel: audit: type=1006 audit(1696273580.966:1292): pid=2933 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:06:20.976550 kernel: audit: type=1300 audit(1696273580.966:1292): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe29caaf0 a2=3 a3=1 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:20.976580 kernel: audit: type=1327 audit(1696273580.966:1292): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:20.966000 audit[2933]: CRED_ACQ pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:20.966000 audit[2933]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe29caaf0 a2=3 a3=1 items=0 ppid=1 pid=2933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:20.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:20.968105 sshd[2933]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:20.991966 systemd-logind[1125]: New session 25 of user core. Oct 2 19:06:20.996982 systemd[1]: Started session-25.scope. Oct 2 19:06:21.007799 kernel: audit: type=1105 audit(1696273581.000:1293): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.007879 kernel: audit: type=1103 audit(1696273581.001:1294): pid=2935 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.000000 audit[2933]: USER_START pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.001000 audit[2935]: CRED_ACQ pid=2935 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.127202 sshd[2933]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:21.127000 audit[2933]: USER_END pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.132381 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:06:21.130000 audit[2933]: CRED_DISP pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.133503 systemd[1]: sshd@24-10.0.0.86:22-10.0.0.1:37622.service: Deactivated successfully. Oct 2 19:06:21.133725 systemd-logind[1125]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:06:21.134481 systemd-logind[1125]: Removed session 25. Oct 2 19:06:21.137613 kernel: audit: type=1106 audit(1696273581.127:1295): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.137688 kernel: audit: type=1104 audit(1696273581.130:1296): pid=2933 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:21.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.86:22-10.0.0.1:37622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:22.400085 kubelet[2040]: E1002 19:06:22.400055 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:27.401599 kubelet[2040]: E1002 19:06:27.401569 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:29.336836 kubelet[2040]: E1002 19:06:29.336800 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:29.337234 kubelet[2040]: E1002 19:06:29.336800 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:29.337501 kubelet[2040]: E1002 19:06:29.337485 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:06:31.131575 systemd[1]: Started sshd@25-10.0.0.86:22-10.0.0.1:52750.service. Oct 2 19:06:31.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.86:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.135670 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:31.135733 kernel: audit: type=1130 audit(1696273591.130:1298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.86:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:31.167000 audit[2949]: USER_ACCT pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.168598 sshd[2949]: Accepted publickey for core from 10.0.0.1 port 52750 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:31.170860 sshd[2949]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:31.169000 audit[2949]: CRED_ACQ pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.175498 kernel: audit: type=1101 audit(1696273591.167:1299): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.175692 kernel: audit: type=1103 audit(1696273591.169:1300): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.175726 kernel: audit: type=1006 audit(1696273591.169:1301): pid=2949 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:06:31.179711 systemd-logind[1125]: New session 26 of user core. Oct 2 19:06:31.180148 systemd[1]: Started session-26.scope. Oct 2 19:06:31.169000 audit[2949]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffce59c00 a2=3 a3=1 items=0 ppid=1 pid=2949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:31.193744 kernel: audit: type=1300 audit(1696273591.169:1301): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffce59c00 a2=3 a3=1 items=0 ppid=1 pid=2949 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:31.193817 kernel: audit: type=1327 audit(1696273591.169:1301): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:31.169000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:31.196000 audit[2949]: USER_START pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.202507 kernel: audit: type=1105 audit(1696273591.196:1302): pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.202000 audit[2951]: CRED_ACQ pid=2951 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.209211 kernel: audit: type=1103 audit(1696273591.202:1303): pid=2951 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.325590 sshd[2949]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:31.329756 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:06:31.325000 audit[2949]: USER_END pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.330457 systemd-logind[1125]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:06:31.330545 systemd[1]: sshd@25-10.0.0.86:22-10.0.0.1:52750.service: Deactivated successfully. Oct 2 19:06:31.332353 systemd-logind[1125]: Removed session 26. Oct 2 19:06:31.327000 audit[2949]: CRED_DISP pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.337041 kernel: audit: type=1106 audit(1696273591.325:1304): pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.337134 kernel: audit: type=1104 audit(1696273591.327:1305): pid=2949 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:31.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.86:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:32.336491 kubelet[2040]: E1002 19:06:32.336441 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:32.403295 kubelet[2040]: E1002 19:06:32.403235 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:34.202000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.202000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cd875f0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.202000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.202000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cd87620 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.202000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.202000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cd87680 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.202000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.202000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40029cbe20 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.220000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.220000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400db2cc30 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.220000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.220000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40029f4020 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:06:34.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:06:34.519000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.519000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:34.519000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002729120 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:34.519000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:34.519000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002695350 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:34.519000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:35.336164 kubelet[2040]: E1002 19:06:35.336134 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:37.404802 kubelet[2040]: E1002 19:06:37.404766 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:41.332565 systemd[1]: Started sshd@26-10.0.0.86:22-10.0.0.1:34810.service. Oct 2 19:06:41.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.86:22-10.0.0.1:34810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.333407 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:06:41.333476 kernel: audit: type=1130 audit(1696273601.331:1315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.86:22-10.0.0.1:34810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.340288 kubelet[2040]: E1002 19:06:41.340252 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:41.344470 kubelet[2040]: E1002 19:06:41.344343 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-c9s82_kube-system(bdff57a1-eef1-4e8a-9c3e-d31c448cbef5)\"" pod="kube-system/cilium-c9s82" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 Oct 2 19:06:41.368000 audit[2965]: USER_ACCT pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.373504 kernel: audit: type=1101 audit(1696273601.368:1316): pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.373563 sshd[2965]: Accepted publickey for core from 10.0.0.1 port 34810 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:41.373000 audit[2965]: CRED_ACQ pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.374450 sshd[2965]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:41.377045 kernel: audit: type=1103 audit(1696273601.373:1317): pid=2965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.377103 kernel: audit: type=1006 audit(1696273601.373:1318): pid=2965 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:06:41.373000 audit[2965]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8b9ca90 a2=3 a3=1 items=0 ppid=1 pid=2965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:41.379011 systemd-logind[1125]: New session 27 of user core. Oct 2 19:06:41.381926 systemd[1]: Started session-27.scope. Oct 2 19:06:41.384628 kernel: audit: type=1300 audit(1696273601.373:1318): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8b9ca90 a2=3 a3=1 items=0 ppid=1 pid=2965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:41.384693 kernel: audit: type=1327 audit(1696273601.373:1318): proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:41.373000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:41.387000 audit[2965]: USER_START pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.391000 audit[2967]: CRED_ACQ pid=2967 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.396823 kernel: audit: type=1105 audit(1696273601.387:1319): pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.396894 kernel: audit: type=1103 audit(1696273601.391:1320): pid=2967 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.530506 sshd[2965]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:41.530000 audit[2965]: USER_END pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.533403 systemd[1]: sshd@26-10.0.0.86:22-10.0.0.1:34810.service: Deactivated successfully. Oct 2 19:06:41.534126 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:06:41.530000 audit[2965]: CRED_DISP pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.538259 kernel: audit: type=1106 audit(1696273601.530:1321): pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.538337 kernel: audit: type=1104 audit(1696273601.530:1322): pid=2965 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:41.538316 systemd-logind[1125]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:06:41.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.86:22-10.0.0.1:34810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:41.539111 systemd-logind[1125]: Removed session 27. Oct 2 19:06:42.406093 kubelet[2040]: E1002 19:06:42.406068 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:47.408049 kubelet[2040]: E1002 19:06:47.407874 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:47.750000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.752124 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:06:47.752191 kernel: audit: type=1400 audit(1696273607.750:1324): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.750000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.757913 kernel: audit: type=1400 audit(1696273607.750:1325): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.757948 kernel: audit: type=1300 audit(1696273607.750:1325): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400285a5c0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.750000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400285a5c0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.765146 kernel: audit: type=1327 audit(1696273607.750:1325): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.765199 kernel: audit: type=1400 audit(1696273607.750:1326): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.750000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.750000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400285a5e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.771883 kernel: audit: type=1300 audit(1696273607.750:1326): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400285a5e0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.771913 kernel: audit: type=1327 audit(1696273607.750:1326): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.750000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002729ca0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.779069 kernel: audit: type=1300 audit(1696273607.750:1324): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002729ca0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.779122 kernel: audit: type=1327 audit(1696273607.750:1324): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:47.751000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.785230 kernel: audit: type=1400 audit(1696273607.751:1327): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:06:47.751000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002729cc0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:06:47.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:06:51.535366 systemd[1]: Started sshd@27-10.0.0.86:22-10.0.0.1:52134.service. Oct 2 19:06:51.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.86:22-10.0.0.1:52134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:51.596000 audit[2980]: USER_ACCT pid=2980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.597502 sshd[2980]: Accepted publickey for core from 10.0.0.1 port 52134 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:51.597000 audit[2980]: CRED_ACQ pid=2980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.597000 audit[2980]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1f44130 a2=3 a3=1 items=0 ppid=1 pid=2980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:51.597000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:51.598705 sshd[2980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:51.602701 systemd-logind[1125]: New session 28 of user core. Oct 2 19:06:51.603560 systemd[1]: Started session-28.scope. Oct 2 19:06:51.606000 audit[2980]: USER_START pid=2980 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.610000 audit[2982]: CRED_ACQ pid=2982 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.728996 sshd[2980]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:51.730000 audit[2980]: USER_END pid=2980 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.730000 audit[2980]: CRED_DISP pid=2980 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.733542 systemd[1]: Started sshd@28-10.0.0.86:22-10.0.0.1:52138.service. Oct 2 19:06:51.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.86:22-10.0.0.1:52138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:51.734090 systemd[1]: sshd@27-10.0.0.86:22-10.0.0.1:52134.service: Deactivated successfully. Oct 2 19:06:51.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.86:22-10.0.0.1:52134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:51.734765 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:06:51.735362 systemd-logind[1125]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:06:51.736158 systemd-logind[1125]: Removed session 28. Oct 2 19:06:51.768000 audit[2994]: USER_ACCT pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.769791 sshd[2994]: Accepted publickey for core from 10.0.0.1 port 52138 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:51.770000 audit[2994]: CRED_ACQ pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.770000 audit[2994]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff19e6560 a2=3 a3=1 items=0 ppid=1 pid=2994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:51.770000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:51.771408 sshd[2994]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:51.775366 systemd-logind[1125]: New session 29 of user core. Oct 2 19:06:51.775962 systemd[1]: Started session-29.scope. Oct 2 19:06:51.778000 audit[2994]: USER_START pid=2994 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:51.780000 audit[2997]: CRED_ACQ pid=2997 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:52.409091 kubelet[2040]: E1002 19:06:52.409070 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:53.462294 env[1139]: time="2023-10-02T19:06:53.462249579Z" level=info msg="StopPodSandbox for \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\"" Oct 2 19:06:53.462677 env[1139]: time="2023-10-02T19:06:53.462322179Z" level=info msg="Container to stop \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:53.464182 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218-shm.mount: Deactivated successfully. Oct 2 19:06:53.475569 systemd[1]: cri-containerd-0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218.scope: Deactivated successfully. Oct 2 19:06:53.477499 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 19:06:53.477584 kernel: audit: type=1334 audit(1696273613.474:1343): prog-id=109 op=UNLOAD Oct 2 19:06:53.474000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:06:53.486000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:06:53.489033 kernel: audit: type=1334 audit(1696273613.486:1344): prog-id=113 op=UNLOAD Oct 2 19:06:53.493657 env[1139]: time="2023-10-02T19:06:53.493613373Z" level=info msg="StopContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" with timeout 30 (s)" Oct 2 19:06:53.494097 env[1139]: time="2023-10-02T19:06:53.494055333Z" level=info msg="Stop container \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" with signal terminated" Oct 2 19:06:53.508880 systemd[1]: cri-containerd-ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990.scope: Deactivated successfully. Oct 2 19:06:53.508000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:06:53.511054 kernel: audit: type=1334 audit(1696273613.508:1345): prog-id=124 op=UNLOAD Oct 2 19:06:53.511000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:06:53.514155 kernel: audit: type=1334 audit(1696273613.511:1346): prog-id=127 op=UNLOAD Oct 2 19:06:53.517820 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218-rootfs.mount: Deactivated successfully. Oct 2 19:06:53.527040 env[1139]: time="2023-10-02T19:06:53.526978406Z" level=info msg="shim disconnected" id=0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218 Oct 2 19:06:53.527040 env[1139]: time="2023-10-02T19:06:53.527043846Z" level=warning msg="cleaning up after shim disconnected" id=0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218 namespace=k8s.io Oct 2 19:06:53.527230 env[1139]: time="2023-10-02T19:06:53.527054326Z" level=info msg="cleaning up dead shim" Oct 2 19:06:53.531629 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990-rootfs.mount: Deactivated successfully. Oct 2 19:06:53.535928 env[1139]: time="2023-10-02T19:06:53.535887004Z" level=info msg="shim disconnected" id=ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990 Oct 2 19:06:53.536461 env[1139]: time="2023-10-02T19:06:53.536429124Z" level=warning msg="cleaning up after shim disconnected" id=ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990 namespace=k8s.io Oct 2 19:06:53.536547 env[1139]: time="2023-10-02T19:06:53.536533564Z" level=info msg="cleaning up dead shim" Oct 2 19:06:53.542155 env[1139]: time="2023-10-02T19:06:53.542112643Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3043 runtime=io.containerd.runc.v2\n" Oct 2 19:06:53.542494 env[1139]: time="2023-10-02T19:06:53.542452083Z" level=info msg="TearDown network for sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" successfully" Oct 2 19:06:53.542494 env[1139]: time="2023-10-02T19:06:53.542486123Z" level=info msg="StopPodSandbox for \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" returns successfully" Oct 2 19:06:53.554396 env[1139]: time="2023-10-02T19:06:53.554316120Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3056 runtime=io.containerd.runc.v2\n" Oct 2 19:06:53.556537 env[1139]: time="2023-10-02T19:06:53.556489400Z" level=info msg="StopContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" returns successfully" Oct 2 19:06:53.557119 env[1139]: time="2023-10-02T19:06:53.557091640Z" level=info msg="StopPodSandbox for \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\"" Oct 2 19:06:53.557175 env[1139]: time="2023-10-02T19:06:53.557155640Z" level=info msg="Container to stop \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:06:53.558715 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3-shm.mount: Deactivated successfully. Oct 2 19:06:53.567000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:06:53.568190 systemd[1]: cri-containerd-64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3.scope: Deactivated successfully. Oct 2 19:06:53.570095 kernel: audit: type=1334 audit(1696273613.567:1347): prog-id=120 op=UNLOAD Oct 2 19:06:53.577000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:06:53.580044 kernel: audit: type=1334 audit(1696273613.577:1348): prog-id=123 op=UNLOAD Oct 2 19:06:53.592940 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3-rootfs.mount: Deactivated successfully. Oct 2 19:06:53.599035 env[1139]: time="2023-10-02T19:06:53.598981951Z" level=info msg="shim disconnected" id=64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3 Oct 2 19:06:53.599204 env[1139]: time="2023-10-02T19:06:53.599050711Z" level=warning msg="cleaning up after shim disconnected" id=64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3 namespace=k8s.io Oct 2 19:06:53.599204 env[1139]: time="2023-10-02T19:06:53.599061471Z" level=info msg="cleaning up dead shim" Oct 2 19:06:53.607543 env[1139]: time="2023-10-02T19:06:53.607496229Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3087 runtime=io.containerd.runc.v2\n" Oct 2 19:06:53.607825 env[1139]: time="2023-10-02T19:06:53.607790829Z" level=info msg="TearDown network for sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" successfully" Oct 2 19:06:53.607825 env[1139]: time="2023-10-02T19:06:53.607816989Z" level=info msg="StopPodSandbox for \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" returns successfully" Oct 2 19:06:53.614980 kubelet[2040]: I1002 19:06:53.614871 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hostproc\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.615536 kubelet[2040]: I1002 19:06:53.615457 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hostproc" (OuterVolumeSpecName: "hostproc") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618592 kubelet[2040]: I1002 19:06:53.618567 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hubble-tls\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618689 kubelet[2040]: I1002 19:06:53.618604 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-lib-modules\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618689 kubelet[2040]: I1002 19:06:53.618623 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cni-path\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618689 kubelet[2040]: I1002 19:06:53.618646 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-run\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618689 kubelet[2040]: I1002 19:06:53.618670 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-etc-cni-netd\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618689 kubelet[2040]: I1002 19:06:53.618682 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cni-path" (OuterVolumeSpecName: "cni-path") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618822 kubelet[2040]: I1002 19:06:53.618690 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-cgroup\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618822 kubelet[2040]: I1002 19:06:53.618710 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618822 kubelet[2040]: I1002 19:06:53.618731 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618822 kubelet[2040]: I1002 19:06:53.618736 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-config-path\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618822 kubelet[2040]: I1002 19:06:53.618748 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618663 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618761 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-nbwfn\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-kube-api-access-nbwfn\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618780 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-net\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618799 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-kernel\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618819 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-clustermesh-secrets\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.618940 kubelet[2040]: I1002 19:06:53.618836 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-bpf-maps\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618863 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-xtables-lock\") pod \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\" (UID: \"bdff57a1-eef1-4e8a-9c3e-d31c448cbef5\") " Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618900 2040 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618910 2040 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618920 2040 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618929 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618937 2040 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.619132 kubelet[2040]: I1002 19:06:53.618954 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.619616 kubelet[2040]: I1002 19:06:53.619158 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.619616 kubelet[2040]: W1002 19:06:53.619152 2040 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:06:53.619616 kubelet[2040]: I1002 19:06:53.619198 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.619616 kubelet[2040]: I1002 19:06:53.619276 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:06:53.621711 kubelet[2040]: I1002 19:06:53.620960 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:53.622344 kubelet[2040]: I1002 19:06:53.622308 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:53.622553 kubelet[2040]: I1002 19:06:53.622521 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:06:53.622831 kubelet[2040]: I1002 19:06:53.622806 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-kube-api-access-nbwfn" (OuterVolumeSpecName: "kube-api-access-nbwfn") pod "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" (UID: "bdff57a1-eef1-4e8a-9c3e-d31c448cbef5"). InnerVolumeSpecName "kube-api-access-nbwfn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719185 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/419f1089-62ba-43b4-ae40-9a1b21040678-cilium-config-path\") pod \"419f1089-62ba-43b4-ae40-9a1b21040678\" (UID: \"419f1089-62ba-43b4-ae40-9a1b21040678\") " Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719233 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f6l76\" (UniqueName: \"kubernetes.io/projected/419f1089-62ba-43b4-ae40-9a1b21040678-kube-api-access-f6l76\") pod \"419f1089-62ba-43b4-ae40-9a1b21040678\" (UID: \"419f1089-62ba-43b4-ae40-9a1b21040678\") " Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719267 2040 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719277 2040 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719288 2040 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719297 2040 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.719893 kubelet[2040]: I1002 19:06:53.719305 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.720200 kubelet[2040]: I1002 19:06:53.719315 2040 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.720200 kubelet[2040]: I1002 19:06:53.719324 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.720200 kubelet[2040]: I1002 19:06:53.719332 2040 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-nbwfn\" (UniqueName: \"kubernetes.io/projected/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-kube-api-access-nbwfn\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.720200 kubelet[2040]: I1002 19:06:53.719341 2040 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.720200 kubelet[2040]: W1002 19:06:53.719757 2040 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/419f1089-62ba-43b4-ae40-9a1b21040678/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:06:53.721552 kubelet[2040]: I1002 19:06:53.721488 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/419f1089-62ba-43b4-ae40-9a1b21040678-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "419f1089-62ba-43b4-ae40-9a1b21040678" (UID: "419f1089-62ba-43b4-ae40-9a1b21040678"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:06:53.722256 kubelet[2040]: I1002 19:06:53.722235 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/419f1089-62ba-43b4-ae40-9a1b21040678-kube-api-access-f6l76" (OuterVolumeSpecName: "kube-api-access-f6l76") pod "419f1089-62ba-43b4-ae40-9a1b21040678" (UID: "419f1089-62ba-43b4-ae40-9a1b21040678"). InnerVolumeSpecName "kube-api-access-f6l76". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:06:53.819792 kubelet[2040]: I1002 19:06:53.819748 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/419f1089-62ba-43b4-ae40-9a1b21040678-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.819792 kubelet[2040]: I1002 19:06:53.819783 2040 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-f6l76\" (UniqueName: \"kubernetes.io/projected/419f1089-62ba-43b4-ae40-9a1b21040678-kube-api-access-f6l76\") on node \"localhost\" DevicePath \"\"" Oct 2 19:06:53.822899 kubelet[2040]: I1002 19:06:53.822877 2040 scope.go:115] "RemoveContainer" containerID="ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990" Oct 2 19:06:53.826628 systemd[1]: Removed slice kubepods-besteffort-pod419f1089_62ba_43b4_ae40_9a1b21040678.slice. Oct 2 19:06:53.827148 env[1139]: time="2023-10-02T19:06:53.827118104Z" level=info msg="RemoveContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\"" Oct 2 19:06:53.829710 env[1139]: time="2023-10-02T19:06:53.829669784Z" level=info msg="RemoveContainer for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" returns successfully" Oct 2 19:06:53.829885 kubelet[2040]: I1002 19:06:53.829867 2040 scope.go:115] "RemoveContainer" containerID="ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990" Oct 2 19:06:53.830164 env[1139]: time="2023-10-02T19:06:53.830058344Z" level=error msg="ContainerStatus for \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\": not found" Oct 2 19:06:53.830277 kubelet[2040]: E1002 19:06:53.830258 2040 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\": not found" containerID="ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990" Oct 2 19:06:53.830316 kubelet[2040]: I1002 19:06:53.830293 2040 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990} err="failed to get container status \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\": rpc error: code = NotFound desc = an error occurred when try to find container \"ce689234b691f75dce2de09220c601f4c8da9bc1c90667c05d27662fcb1d5990\": not found" Oct 2 19:06:53.830316 kubelet[2040]: I1002 19:06:53.830305 2040 scope.go:115] "RemoveContainer" containerID="a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4" Oct 2 19:06:53.831599 systemd[1]: Removed slice kubepods-burstable-podbdff57a1_eef1_4e8a_9c3e_d31c448cbef5.slice. Oct 2 19:06:53.832129 env[1139]: time="2023-10-02T19:06:53.832024903Z" level=info msg="RemoveContainer for \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\"" Oct 2 19:06:53.833872 env[1139]: time="2023-10-02T19:06:53.833841783Z" level=info msg="RemoveContainer for \"a102c87367c3de18385a4868dcffba547e3546d869b7fde55057739f18ae13e4\" returns successfully" Oct 2 19:06:54.463894 systemd[1]: var-lib-kubelet-pods-419f1089\x2d62ba\x2d43b4\x2dae40\x2d9a1b21040678-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df6l76.mount: Deactivated successfully. Oct 2 19:06:54.464005 systemd[1]: var-lib-kubelet-pods-bdff57a1\x2deef1\x2d4e8a\x2d9c3e\x2dd31c448cbef5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dnbwfn.mount: Deactivated successfully. Oct 2 19:06:54.464077 systemd[1]: var-lib-kubelet-pods-bdff57a1\x2deef1\x2d4e8a\x2d9c3e\x2dd31c448cbef5-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:06:54.464133 systemd[1]: var-lib-kubelet-pods-bdff57a1\x2deef1\x2d4e8a\x2d9c3e\x2dd31c448cbef5-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:06:55.337993 kubelet[2040]: I1002 19:06:55.337966 2040 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=419f1089-62ba-43b4-ae40-9a1b21040678 path="/var/lib/kubelet/pods/419f1089-62ba-43b4-ae40-9a1b21040678/volumes" Oct 2 19:06:55.338754 kubelet[2040]: I1002 19:06:55.338735 2040 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=bdff57a1-eef1-4e8a-9c3e-d31c448cbef5 path="/var/lib/kubelet/pods/bdff57a1-eef1-4e8a-9c3e-d31c448cbef5/volumes" Oct 2 19:06:55.431097 sshd[2994]: pam_unix(sshd:session): session closed for user core Oct 2 19:06:55.431000 audit[2994]: USER_END pid=2994 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.434209 systemd[1]: Started sshd@29-10.0.0.86:22-10.0.0.1:40682.service. Oct 2 19:06:55.434765 systemd[1]: sshd@28-10.0.0.86:22-10.0.0.1:52138.service: Deactivated successfully. Oct 2 19:06:55.435567 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:06:55.435760 systemd[1]: session-29.scope: Consumed 1.023s CPU time. Oct 2 19:06:55.431000 audit[2994]: CRED_DISP pid=2994 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.439443 kernel: audit: type=1106 audit(1696273615.431:1349): pid=2994 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.439524 kernel: audit: type=1104 audit(1696273615.431:1350): pid=2994 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.439557 kernel: audit: type=1130 audit(1696273615.432:1351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.86:22-10.0.0.1:40682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:55.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.86:22-10.0.0.1:40682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:55.440114 systemd-logind[1125]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:06:55.440996 systemd-logind[1125]: Removed session 29. Oct 2 19:06:55.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.86:22-10.0.0.1:52138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:55.444779 kernel: audit: type=1131 audit(1696273615.432:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.86:22-10.0.0.1:52138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:06:55.471000 audit[3104]: USER_ACCT pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.472642 sshd[3104]: Accepted publickey for core from 10.0.0.1 port 40682 ssh2: RSA SHA256:327EISj6dhgnnLT6sEqi2+uwythtGn0QzwGU+yMaXG4 Oct 2 19:06:55.472000 audit[3104]: CRED_ACQ pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.472000 audit[3104]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9ec9e10 a2=3 a3=1 items=0 ppid=1 pid=3104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:55.472000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:06:55.474197 sshd[3104]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:06:55.477888 systemd-logind[1125]: New session 30 of user core. Oct 2 19:06:55.478999 systemd[1]: Started session-30.scope. Oct 2 19:06:55.482000 audit[3104]: USER_START pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:55.483000 audit[3107]: CRED_ACQ pid=3107 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843797 2040 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843849 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843860 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="419f1089-62ba-43b4-ae40-9a1b21040678" containerName="cilium-operator" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843868 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843873 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843879 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843924 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843930 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843936 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="419f1089-62ba-43b4-ae40-9a1b21040678" containerName="cilium-operator" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843943 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: E1002 19:06:56.843956 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843972 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.843964 kubelet[2040]: I1002 19:06:56.843979 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.844606 kubelet[2040]: E1002 19:06:56.844000 2040 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.844606 kubelet[2040]: I1002 19:06:56.844013 2040 memory_manager.go:346] "RemoveStaleState removing state" podUID="bdff57a1-eef1-4e8a-9c3e-d31c448cbef5" containerName="mount-cgroup" Oct 2 19:06:56.848478 systemd[1]: Created slice kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice. Oct 2 19:06:56.936883 kubelet[2040]: I1002 19:06:56.936829 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-run\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.936883 kubelet[2040]: I1002 19:06:56.936869 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-cgroup\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.936883 kubelet[2040]: I1002 19:06:56.936892 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-xtables-lock\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937138 kubelet[2040]: I1002 19:06:56.936945 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-clustermesh-secrets\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937138 kubelet[2040]: I1002 19:06:56.936981 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f91af446-caf0-4b8c-913d-aacd595509af-cilium-config-path\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937138 kubelet[2040]: I1002 19:06:56.937006 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p4pm9\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-kube-api-access-p4pm9\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937138 kubelet[2040]: I1002 19:06:56.937046 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-cilium-ipsec-secrets\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937138 kubelet[2040]: I1002 19:06:56.937073 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-etc-cni-netd\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937103 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-lib-modules\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937132 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-kernel\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937162 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cni-path\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937187 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-bpf-maps\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937206 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-net\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937261 kubelet[2040]: I1002 19:06:56.937225 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-hubble-tls\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:56.937401 kubelet[2040]: I1002 19:06:56.937256 2040 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-hostproc\") pod \"cilium-56hrn\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " pod="kube-system/cilium-56hrn" Oct 2 19:06:57.154974 kubelet[2040]: E1002 19:06:57.150804 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:57.155629 env[1139]: time="2023-10-02T19:06:57.155586793Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-56hrn,Uid:f91af446-caf0-4b8c-913d-aacd595509af,Namespace:kube-system,Attempt:0,}" Oct 2 19:06:57.411575 kubelet[2040]: E1002 19:06:57.410748 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:06:57.706203 env[1139]: time="2023-10-02T19:06:57.706161681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:57.709025 env[1139]: time="2023-10-02T19:06:57.708890241Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:57.709917 env[1139]: time="2023-10-02T19:06:57.709864642Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:57.711828 env[1139]: time="2023-10-02T19:06:57.711464802Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:06:57.726564 env[1139]: time="2023-10-02T19:06:57.726491285Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:06:57.726564 env[1139]: time="2023-10-02T19:06:57.726531605Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:06:57.726564 env[1139]: time="2023-10-02T19:06:57.726542806Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:06:57.726859 env[1139]: time="2023-10-02T19:06:57.726819246Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4 pid=3127 runtime=io.containerd.runc.v2 Oct 2 19:06:57.737631 systemd[1]: Started cri-containerd-661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4.scope. Oct 2 19:06:57.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit: BPF prog-id=128 op=LOAD Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3127 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:57.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636313038376434643566353365336462346136663663656537353832 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3127 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:57.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636313038376434643566353365336462346136663663656537353832 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit: BPF prog-id=129 op=LOAD Oct 2 19:06:57.766000 audit[3137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3127 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:57.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636313038376434643566353365336462346136663663656537353832 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.766000 audit: BPF prog-id=130 op=LOAD Oct 2 19:06:57.766000 audit[3137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3127 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:57.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636313038376434643566353365336462346136663663656537353832 Oct 2 19:06:57.766000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:06:57.766000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { perfmon } for pid=3137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit[3137]: AVC avc: denied { bpf } for pid=3137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:06:57.767000 audit: BPF prog-id=131 op=LOAD Oct 2 19:06:57.767000 audit[3137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3127 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:06:57.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636313038376434643566353365336462346136663663656537353832 Oct 2 19:06:57.779592 env[1139]: time="2023-10-02T19:06:57.779545018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-56hrn,Uid:f91af446-caf0-4b8c-913d-aacd595509af,Namespace:kube-system,Attempt:0,} returns sandbox id \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\"" Oct 2 19:06:57.780372 kubelet[2040]: E1002 19:06:57.780343 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:57.782493 env[1139]: time="2023-10-02T19:06:57.782449739Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:06:57.791582 env[1139]: time="2023-10-02T19:06:57.791528221Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" Oct 2 19:06:57.791904 env[1139]: time="2023-10-02T19:06:57.791878541Z" level=info msg="StartContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" Oct 2 19:06:57.808794 systemd[1]: Started cri-containerd-f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a.scope. Oct 2 19:06:57.823533 systemd[1]: cri-containerd-f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a.scope: Deactivated successfully. Oct 2 19:06:57.838928 env[1139]: time="2023-10-02T19:06:57.838860352Z" level=info msg="shim disconnected" id=f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a Oct 2 19:06:57.838928 env[1139]: time="2023-10-02T19:06:57.838923872Z" level=warning msg="cleaning up after shim disconnected" id=f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a namespace=k8s.io Oct 2 19:06:57.838928 env[1139]: time="2023-10-02T19:06:57.838934432Z" level=info msg="cleaning up dead shim" Oct 2 19:06:57.847313 env[1139]: time="2023-10-02T19:06:57.847273674Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3183 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:57.847700 env[1139]: time="2023-10-02T19:06:57.847650714Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:06:57.848634 env[1139]: time="2023-10-02T19:06:57.847922714Z" level=error msg="Failed to pipe stderr of container \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" error="reading from a closed fifo" Oct 2 19:06:57.848798 env[1139]: time="2023-10-02T19:06:57.848766394Z" level=error msg="Failed to pipe stdout of container \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" error="reading from a closed fifo" Oct 2 19:06:57.850423 env[1139]: time="2023-10-02T19:06:57.850369954Z" level=error msg="StartContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:57.850678 kubelet[2040]: E1002 19:06:57.850640 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a" Oct 2 19:06:57.851146 kubelet[2040]: E1002 19:06:57.850763 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:57.851146 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:57.851146 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:06:57.851146 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-p4pm9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:57.851318 kubelet[2040]: E1002 19:06:57.851146 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:06:58.842086 kubelet[2040]: E1002 19:06:58.841451 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:58.843490 env[1139]: time="2023-10-02T19:06:58.843444274Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:06:58.851863 env[1139]: time="2023-10-02T19:06:58.851770957Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" Oct 2 19:06:58.852369 env[1139]: time="2023-10-02T19:06:58.852304237Z" level=info msg="StartContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" Oct 2 19:06:58.873770 systemd[1]: Started cri-containerd-274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5.scope. Oct 2 19:06:58.888858 systemd[1]: cri-containerd-274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5.scope: Deactivated successfully. Oct 2 19:06:58.902000 env[1139]: time="2023-10-02T19:06:58.901943974Z" level=info msg="shim disconnected" id=274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5 Oct 2 19:06:58.902000 env[1139]: time="2023-10-02T19:06:58.902000734Z" level=warning msg="cleaning up after shim disconnected" id=274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5 namespace=k8s.io Oct 2 19:06:58.902000 env[1139]: time="2023-10-02T19:06:58.902011134Z" level=info msg="cleaning up dead shim" Oct 2 19:06:58.912704 env[1139]: time="2023-10-02T19:06:58.912642137Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:06:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3220 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:06:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:06:58.912964 env[1139]: time="2023-10-02T19:06:58.912908297Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:06:58.913241 env[1139]: time="2023-10-02T19:06:58.913189057Z" level=error msg="Failed to pipe stderr of container \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" error="reading from a closed fifo" Oct 2 19:06:58.915216 env[1139]: time="2023-10-02T19:06:58.915152738Z" level=error msg="Failed to pipe stdout of container \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" error="reading from a closed fifo" Oct 2 19:06:58.916822 env[1139]: time="2023-10-02T19:06:58.916774019Z" level=error msg="StartContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:06:58.917114 kubelet[2040]: E1002 19:06:58.917012 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5" Oct 2 19:06:58.917399 kubelet[2040]: E1002 19:06:58.917202 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:06:58.917399 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:06:58.917399 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:06:58.917399 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-p4pm9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:06:58.917529 kubelet[2040]: E1002 19:06:58.917239 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:06:59.042260 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5-rootfs.mount: Deactivated successfully. Oct 2 19:06:59.845951 kubelet[2040]: I1002 19:06:59.845133 2040 scope.go:115] "RemoveContainer" containerID="f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a" Oct 2 19:06:59.845951 kubelet[2040]: I1002 19:06:59.845905 2040 scope.go:115] "RemoveContainer" containerID="f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a" Oct 2 19:06:59.847945 env[1139]: time="2023-10-02T19:06:59.847896860Z" level=info msg="RemoveContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" Oct 2 19:06:59.849619 env[1139]: time="2023-10-02T19:06:59.849078941Z" level=info msg="RemoveContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\"" Oct 2 19:06:59.849699 env[1139]: time="2023-10-02T19:06:59.849667861Z" level=error msg="RemoveContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\" failed" error="failed to set removing state for container \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\": container is already in removing state" Oct 2 19:06:59.849840 kubelet[2040]: E1002 19:06:59.849816 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\": container is already in removing state" containerID="f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a" Oct 2 19:06:59.849932 kubelet[2040]: E1002 19:06:59.849923 2040 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a": container is already in removing state; Skipping pod "cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)" Oct 2 19:06:59.850062 kubelet[2040]: E1002 19:06:59.850052 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:06:59.850384 kubelet[2040]: E1002 19:06:59.850371 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:06:59.853789 env[1139]: time="2023-10-02T19:06:59.853751343Z" level=info msg="RemoveContainer for \"f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a\" returns successfully" Oct 2 19:07:00.848375 kubelet[2040]: E1002 19:07:00.848329 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:00.848944 kubelet[2040]: E1002 19:07:00.848926 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:00.943770 kubelet[2040]: W1002 19:07:00.943737 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice/cri-containerd-f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a.scope WatchSource:0}: container "f1219cff7fe2b8fb7539fcb6492981152da101c57d57c9cdbd4455a838e7712a" in namespace "k8s.io": not found Oct 2 19:07:02.411950 kubelet[2040]: E1002 19:07:02.411922 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:04.050297 kubelet[2040]: W1002 19:07:04.050261 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice/cri-containerd-274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5.scope WatchSource:0}: task 274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5 not found: not found Oct 2 19:07:07.413552 kubelet[2040]: E1002 19:07:07.413509 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:12.414141 kubelet[2040]: E1002 19:07:12.414115 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:15.336570 kubelet[2040]: E1002 19:07:15.336532 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:15.338576 env[1139]: time="2023-10-02T19:07:15.338514015Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:07:15.345768 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1342080684.mount: Deactivated successfully. Oct 2 19:07:15.350451 env[1139]: time="2023-10-02T19:07:15.350390838Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" Oct 2 19:07:15.350749 env[1139]: time="2023-10-02T19:07:15.350724959Z" level=info msg="StartContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" Oct 2 19:07:15.377470 systemd[1]: Started cri-containerd-98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f.scope. Oct 2 19:07:15.402105 systemd[1]: cri-containerd-98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f.scope: Deactivated successfully. Oct 2 19:07:15.410188 env[1139]: time="2023-10-02T19:07:15.410130351Z" level=info msg="shim disconnected" id=98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f Oct 2 19:07:15.410188 env[1139]: time="2023-10-02T19:07:15.410183791Z" level=warning msg="cleaning up after shim disconnected" id=98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f namespace=k8s.io Oct 2 19:07:15.410188 env[1139]: time="2023-10-02T19:07:15.410192671Z" level=info msg="cleaning up dead shim" Oct 2 19:07:15.418399 env[1139]: time="2023-10-02T19:07:15.418349287Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3257 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:07:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:07:15.418640 env[1139]: time="2023-10-02T19:07:15.418590007Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 19:07:15.418797 env[1139]: time="2023-10-02T19:07:15.418757807Z" level=error msg="Failed to pipe stdout of container \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" error="reading from a closed fifo" Oct 2 19:07:15.420577 env[1139]: time="2023-10-02T19:07:15.420527891Z" level=error msg="Failed to pipe stderr of container \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" error="reading from a closed fifo" Oct 2 19:07:15.421921 env[1139]: time="2023-10-02T19:07:15.421861733Z" level=error msg="StartContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:07:15.422163 kubelet[2040]: E1002 19:07:15.422126 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f" Oct 2 19:07:15.422258 kubelet[2040]: E1002 19:07:15.422223 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:07:15.422258 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:07:15.422258 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:07:15.422258 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-p4pm9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:07:15.422403 kubelet[2040]: E1002 19:07:15.422256 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:15.876748 kubelet[2040]: I1002 19:07:15.876720 2040 scope.go:115] "RemoveContainer" containerID="274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5" Oct 2 19:07:15.877129 kubelet[2040]: I1002 19:07:15.877106 2040 scope.go:115] "RemoveContainer" containerID="274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5" Oct 2 19:07:15.878297 env[1139]: time="2023-10-02T19:07:15.878251598Z" level=info msg="RemoveContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" Oct 2 19:07:15.878847 env[1139]: time="2023-10-02T19:07:15.878823159Z" level=info msg="RemoveContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\"" Oct 2 19:07:15.878930 env[1139]: time="2023-10-02T19:07:15.878899360Z" level=error msg="RemoveContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\" failed" error="failed to set removing state for container \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\": container is already in removing state" Oct 2 19:07:15.879181 kubelet[2040]: E1002 19:07:15.879162 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\": container is already in removing state" containerID="274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5" Oct 2 19:07:15.879268 kubelet[2040]: E1002 19:07:15.879257 2040 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5": container is already in removing state; Skipping pod "cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)" Oct 2 19:07:15.879412 kubelet[2040]: E1002 19:07:15.879400 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:15.879680 kubelet[2040]: E1002 19:07:15.879663 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:15.883150 env[1139]: time="2023-10-02T19:07:15.881395724Z" level=info msg="RemoveContainer for \"274d3e7e010ebf68aae0354486abf30b24040a5b0a7b762fbc80f5e0cebf13b5\" returns successfully" Oct 2 19:07:16.344074 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f-rootfs.mount: Deactivated successfully. Oct 2 19:07:17.415410 kubelet[2040]: E1002 19:07:17.415363 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:18.514678 kubelet[2040]: W1002 19:07:18.514638 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice/cri-containerd-98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f.scope WatchSource:0}: task 98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f not found: not found Oct 2 19:07:21.336111 kubelet[2040]: E1002 19:07:21.336073 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:22.418188 kubelet[2040]: E1002 19:07:22.417494 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:27.419365 kubelet[2040]: E1002 19:07:27.419329 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:29.337332 kubelet[2040]: E1002 19:07:29.336415 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:29.337332 kubelet[2040]: E1002 19:07:29.336622 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:31.340311 kubelet[2040]: E1002 19:07:31.337659 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:32.420670 kubelet[2040]: E1002 19:07:32.420617 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:34.203000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.204396 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 19:07:34.204471 kernel: audit: type=1400 audit(1696273654.203:1377): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.203000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.210074 kernel: audit: type=1400 audit(1696273654.203:1376): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.210141 kernel: audit: type=1300 audit(1696273654.203:1377): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002316aa0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.203000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002316aa0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.213668 kernel: audit: type=1327 audit(1696273654.203:1377): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.217009 kernel: audit: type=1400 audit(1696273654.203:1378): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.203000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6783 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.219796 kernel: audit: type=1300 audit(1696273654.203:1378): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400aeb79b0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.203000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400aeb79b0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.223469 kernel: audit: type=1327 audit(1696273654.203:1378): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.226525 kernel: audit: type=1400 audit(1696273654.203:1379): avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.203000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.203000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400aeb7ad0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.233451 kernel: audit: type=1300 audit(1696273654.203:1379): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400aeb7ad0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.233514 kernel: audit: type=1327 audit(1696273654.203:1379): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.203000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400aac17d0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.219000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.219000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400aac1830 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.219000 audit[1926]: AVC avc: denied { watch } for pid=1926 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.219000 audit[1926]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4001cbf4c0 a2=fc6 a3=0 items=0 ppid=1760 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c252,c530 key=(null) Oct 2 19:07:34.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:07:34.520000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7058 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.520000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001ae3230 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:34.520000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:34.520000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:34.520000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002728560 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:34.520000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:37.292225 env[1139]: time="2023-10-02T19:07:37.292178831Z" level=info msg="StopPodSandbox for \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\"" Oct 2 19:07:37.292553 env[1139]: time="2023-10-02T19:07:37.292267951Z" level=info msg="TearDown network for sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" successfully" Oct 2 19:07:37.292553 env[1139]: time="2023-10-02T19:07:37.292312791Z" level=info msg="StopPodSandbox for \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" returns successfully" Oct 2 19:07:37.292701 env[1139]: time="2023-10-02T19:07:37.292664233Z" level=info msg="RemovePodSandbox for \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\"" Oct 2 19:07:37.292740 env[1139]: time="2023-10-02T19:07:37.292699513Z" level=info msg="Forcibly stopping sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\"" Oct 2 19:07:37.292790 env[1139]: time="2023-10-02T19:07:37.292769713Z" level=info msg="TearDown network for sandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" successfully" Oct 2 19:07:37.295469 env[1139]: time="2023-10-02T19:07:37.295427802Z" level=info msg="RemovePodSandbox \"0ae7bdc92693e9347b2591465c17c6af445005f7762afa4c8e36ab573e2ae218\" returns successfully" Oct 2 19:07:37.295845 env[1139]: time="2023-10-02T19:07:37.295824123Z" level=info msg="StopPodSandbox for \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\"" Oct 2 19:07:37.295927 env[1139]: time="2023-10-02T19:07:37.295895684Z" level=info msg="TearDown network for sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" successfully" Oct 2 19:07:37.295961 env[1139]: time="2023-10-02T19:07:37.295927644Z" level=info msg="StopPodSandbox for \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" returns successfully" Oct 2 19:07:37.296225 env[1139]: time="2023-10-02T19:07:37.296201285Z" level=info msg="RemovePodSandbox for \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\"" Oct 2 19:07:37.296273 env[1139]: time="2023-10-02T19:07:37.296230285Z" level=info msg="Forcibly stopping sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\"" Oct 2 19:07:37.296322 env[1139]: time="2023-10-02T19:07:37.296304845Z" level=info msg="TearDown network for sandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" successfully" Oct 2 19:07:37.299750 env[1139]: time="2023-10-02T19:07:37.299692496Z" level=info msg="RemovePodSandbox \"64129b2a0517ed2c88ad8d403806292eba4b49dc578a5b3114311f4907be1af3\" returns successfully" Oct 2 19:07:37.339546 kubelet[2040]: W1002 19:07:37.339525 2040 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 19:07:37.422202 kubelet[2040]: E1002 19:07:37.422174 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:40.336529 kubelet[2040]: E1002 19:07:40.336489 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:40.338702 env[1139]: time="2023-10-02T19:07:40.338645593Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:07:40.357785 env[1139]: time="2023-10-02T19:07:40.357702261Z" level=info msg="CreateContainer within sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\"" Oct 2 19:07:40.358555 env[1139]: time="2023-10-02T19:07:40.358515943Z" level=info msg="StartContainer for \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\"" Oct 2 19:07:40.380262 systemd[1]: Started cri-containerd-68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477.scope. Oct 2 19:07:40.396612 systemd[1]: cri-containerd-68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477.scope: Deactivated successfully. Oct 2 19:07:40.400206 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477-rootfs.mount: Deactivated successfully. Oct 2 19:07:40.416527 env[1139]: time="2023-10-02T19:07:40.416471389Z" level=info msg="shim disconnected" id=68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477 Oct 2 19:07:40.416527 env[1139]: time="2023-10-02T19:07:40.416522269Z" level=warning msg="cleaning up after shim disconnected" id=68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477 namespace=k8s.io Oct 2 19:07:40.416757 env[1139]: time="2023-10-02T19:07:40.416533909Z" level=info msg="cleaning up dead shim" Oct 2 19:07:40.424483 env[1139]: time="2023-10-02T19:07:40.424417497Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3299 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:07:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:07:40.424725 env[1139]: time="2023-10-02T19:07:40.424679778Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 19:07:40.424901 env[1139]: time="2023-10-02T19:07:40.424855819Z" level=error msg="Failed to pipe stdout of container \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\"" error="reading from a closed fifo" Oct 2 19:07:40.424977 env[1139]: time="2023-10-02T19:07:40.424944579Z" level=error msg="Failed to pipe stderr of container \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\"" error="reading from a closed fifo" Oct 2 19:07:40.431756 env[1139]: time="2023-10-02T19:07:40.431715163Z" level=error msg="StartContainer for \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:07:40.432248 kubelet[2040]: E1002 19:07:40.432052 2040 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477" Oct 2 19:07:40.432248 kubelet[2040]: E1002 19:07:40.432187 2040 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:07:40.432248 kubelet[2040]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:07:40.432248 kubelet[2040]: rm /hostbin/cilium-mount Oct 2 19:07:40.433701 kubelet[2040]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-p4pm9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:07:40.433763 kubelet[2040]: E1002 19:07:40.432226 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:40.936499 kubelet[2040]: I1002 19:07:40.936135 2040 scope.go:115] "RemoveContainer" containerID="98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f" Oct 2 19:07:40.936499 kubelet[2040]: I1002 19:07:40.936467 2040 scope.go:115] "RemoveContainer" containerID="98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f" Oct 2 19:07:40.939360 env[1139]: time="2023-10-02T19:07:40.939320883Z" level=info msg="RemoveContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" Oct 2 19:07:40.939977 env[1139]: time="2023-10-02T19:07:40.939948526Z" level=info msg="RemoveContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\"" Oct 2 19:07:40.940459 env[1139]: time="2023-10-02T19:07:40.940410527Z" level=error msg="RemoveContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\" failed" error="failed to set removing state for container \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\": container is already in removing state" Oct 2 19:07:40.943641 kubelet[2040]: E1002 19:07:40.940803 2040 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\": container is already in removing state" containerID="98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f" Oct 2 19:07:40.943641 kubelet[2040]: I1002 19:07:40.940844 2040 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f} err="rpc error: code = Unknown desc = failed to set removing state for container \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\": container is already in removing state" Oct 2 19:07:40.954492 env[1139]: time="2023-10-02T19:07:40.954445897Z" level=info msg="RemoveContainer for \"98ea189bef09d911afddb07a5cf950d8e8e097c5c771177b7a96dc674eaea42f\" returns successfully" Oct 2 19:07:40.955293 kubelet[2040]: E1002 19:07:40.954895 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:40.955293 kubelet[2040]: E1002 19:07:40.955161 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:42.422925 kubelet[2040]: E1002 19:07:42.422893 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:43.522406 kubelet[2040]: W1002 19:07:43.522358 2040 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice/cri-containerd-68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477.scope WatchSource:0}: task 68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477 not found: not found Oct 2 19:07:47.423748 kubelet[2040]: E1002 19:07:47.423718 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:47.751000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.753145 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:07:47.753228 kernel: audit: type=1400 audit(1696273667.751:1384): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.751000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015e7840 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.760054 kernel: audit: type=1300 audit(1696273667.751:1384): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015e7840 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.760106 kernel: audit: type=1327 audit(1696273667.751:1384): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.751000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.766467 kernel: audit: type=1400 audit(1696273667.751:1385): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.766538 kernel: audit: type=1300 audit(1696273667.751:1385): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40027286a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.751000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40027286a0 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.774255 kernel: audit: type=1327 audit(1696273667.751:1385): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.774329 kernel: audit: type=1400 audit(1696273667.751:1386): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.751000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.751000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015e7880 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.781064 kernel: audit: type=1300 audit(1696273667.751:1386): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015e7880 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.781105 kernel: audit: type=1327 audit(1696273667.751:1386): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.751000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:47.752000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.787859 kernel: audit: type=1400 audit(1696273667.752:1387): avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6781 scontext=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:07:47.752000 audit[1917]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40014e9460 a2=fc6 a3=0 items=0 ppid=1762 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c139,c360 key=(null) Oct 2 19:07:47.752000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:07:52.335859 kubelet[2040]: E1002 19:07:52.335801 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:52.336225 kubelet[2040]: E1002 19:07:52.336042 2040 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-56hrn_kube-system(f91af446-caf0-4b8c-913d-aacd595509af)\"" pod="kube-system/cilium-56hrn" podUID=f91af446-caf0-4b8c-913d-aacd595509af Oct 2 19:07:52.336495 kubelet[2040]: E1002 19:07:52.336476 2040 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:07:52.424932 kubelet[2040]: E1002 19:07:52.424895 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:57.426469 kubelet[2040]: E1002 19:07:57.426443 2040 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:07:58.078006 env[1139]: time="2023-10-02T19:07:58.074896531Z" level=info msg="StopPodSandbox for \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\"" Oct 2 19:07:58.078006 env[1139]: time="2023-10-02T19:07:58.074972291Z" level=info msg="Container to stop \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:07:58.077512 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4-shm.mount: Deactivated successfully. Oct 2 19:07:58.092000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:07:58.093410 systemd[1]: cri-containerd-661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4.scope: Deactivated successfully. Oct 2 19:07:58.094867 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:07:58.094934 kernel: audit: type=1334 audit(1696273678.092:1388): prog-id=128 op=UNLOAD Oct 2 19:07:58.099000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:07:58.102053 kernel: audit: type=1334 audit(1696273678.099:1389): prog-id=131 op=UNLOAD Oct 2 19:07:58.111547 sshd[3104]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:58.111000 audit[3104]: USER_END pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:58.114398 systemd-logind[1125]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:07:58.116325 systemd[1]: sshd@29-10.0.0.86:22-10.0.0.1:40682.service: Deactivated successfully. Oct 2 19:07:58.117041 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:07:58.117227 systemd[1]: session-30.scope: Consumed 1.580s CPU time. Oct 2 19:07:58.111000 audit[3104]: CRED_DISP pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:58.118250 systemd-logind[1125]: Removed session 30. Oct 2 19:07:58.120651 kernel: audit: type=1106 audit(1696273678.111:1390): pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:58.120726 kernel: audit: type=1104 audit(1696273678.111:1391): pid=3104 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:07:58.120756 kernel: audit: type=1131 audit(1696273678.115:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.86:22-10.0.0.1:40682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.86:22-10.0.0.1:40682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.122334 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4-rootfs.mount: Deactivated successfully. Oct 2 19:07:58.134067 env[1139]: time="2023-10-02T19:07:58.133984630Z" level=info msg="shim disconnected" id=661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4 Oct 2 19:07:58.134067 env[1139]: time="2023-10-02T19:07:58.134049950Z" level=warning msg="cleaning up after shim disconnected" id=661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4 namespace=k8s.io Oct 2 19:07:58.134067 env[1139]: time="2023-10-02T19:07:58.134059430Z" level=info msg="cleaning up dead shim" Oct 2 19:07:58.143422 env[1139]: time="2023-10-02T19:07:58.143066870Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:07:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3335 runtime=io.containerd.runc.v2\n" Oct 2 19:07:58.143422 env[1139]: time="2023-10-02T19:07:58.143382871Z" level=info msg="TearDown network for sandbox \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" successfully" Oct 2 19:07:58.143422 env[1139]: time="2023-10-02T19:07:58.143407351Z" level=info msg="StopPodSandbox for \"661087d4d5f53e3db4a6f6cee75823112edc1c8690203e035fa070b640897dd4\" returns successfully" Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200673 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200710 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-cgroup\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200735 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-xtables-lock\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200762 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-cilium-ipsec-secrets\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200784 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-hostproc\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201086 kubelet[2040]: I1002 19:07:58.200805 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-clustermesh-secrets\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200828 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f91af446-caf0-4b8c-913d-aacd595509af-cilium-config-path\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200845 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-lib-modules\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200862 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-run\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200880 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cni-path\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200896 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-bpf-maps\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201414 kubelet[2040]: I1002 19:07:58.200917 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-hubble-tls\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.200935 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-kernel\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.200956 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-p4pm9\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-kube-api-access-p4pm9\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.200973 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-etc-cni-netd\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.200992 2040 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-net\") pod \"f91af446-caf0-4b8c-913d-aacd595509af\" (UID: \"f91af446-caf0-4b8c-913d-aacd595509af\") " Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.201055 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.201558 kubelet[2040]: I1002 19:07:58.201078 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201694 kubelet[2040]: I1002 19:07:58.201097 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201694 kubelet[2040]: I1002 19:07:58.201367 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201694 kubelet[2040]: I1002 19:07:58.201393 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-hostproc" (OuterVolumeSpecName: "hostproc") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201694 kubelet[2040]: I1002 19:07:58.201408 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201694 kubelet[2040]: I1002 19:07:58.201443 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cni-path" (OuterVolumeSpecName: "cni-path") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.201811 kubelet[2040]: W1002 19:07:58.201615 2040 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/f91af446-caf0-4b8c-913d-aacd595509af/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:07:58.203131 kubelet[2040]: I1002 19:07:58.203087 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.203201 kubelet[2040]: I1002 19:07:58.203144 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.203604 kubelet[2040]: I1002 19:07:58.203556 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f91af446-caf0-4b8c-913d-aacd595509af-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:07:58.203645 kubelet[2040]: I1002 19:07:58.203616 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:07:58.206007 kubelet[2040]: I1002 19:07:58.204210 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:58.209432 systemd[1]: var-lib-kubelet-pods-f91af446\x2dcaf0\x2d4b8c\x2d913d\x2daacd595509af-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:07:58.209618 kubelet[2040]: I1002 19:07:58.209417 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-kube-api-access-p4pm9" (OuterVolumeSpecName: "kube-api-access-p4pm9") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "kube-api-access-p4pm9". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:07:58.210144 kubelet[2040]: I1002 19:07:58.210090 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:58.211647 systemd[1]: var-lib-kubelet-pods-f91af446\x2dcaf0\x2d4b8c\x2d913d\x2daacd595509af-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dp4pm9.mount: Deactivated successfully. Oct 2 19:07:58.211746 systemd[1]: var-lib-kubelet-pods-f91af446\x2dcaf0\x2d4b8c\x2d913d\x2daacd595509af-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:58.211806 systemd[1]: var-lib-kubelet-pods-f91af446\x2dcaf0\x2d4b8c\x2d913d\x2daacd595509af-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:07:58.213314 kubelet[2040]: I1002 19:07:58.213265 2040 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "f91af446-caf0-4b8c-913d-aacd595509af" (UID: "f91af446-caf0-4b8c-913d-aacd595509af"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:07:58.301620 kubelet[2040]: I1002 19:07:58.301572 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301745 kubelet[2040]: I1002 19:07:58.301615 2040 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301745 kubelet[2040]: I1002 19:07:58.301703 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f91af446-caf0-4b8c-913d-aacd595509af-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301745 kubelet[2040]: I1002 19:07:58.301713 2040 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301848 kubelet[2040]: I1002 19:07:58.301785 2040 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301848 kubelet[2040]: I1002 19:07:58.301796 2040 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301848 kubelet[2040]: I1002 19:07:58.301805 2040 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301848 kubelet[2040]: I1002 19:07:58.301818 2040 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301848 kubelet[2040]: I1002 19:07:58.301827 2040 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-p4pm9\" (UniqueName: \"kubernetes.io/projected/f91af446-caf0-4b8c-913d-aacd595509af-kube-api-access-p4pm9\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301981 kubelet[2040]: I1002 19:07:58.301958 2040 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.301981 kubelet[2040]: I1002 19:07:58.301971 2040 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.302052 kubelet[2040]: I1002 19:07:58.301984 2040 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.302052 kubelet[2040]: I1002 19:07:58.301994 2040 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f91af446-caf0-4b8c-913d-aacd595509af-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.302052 kubelet[2040]: I1002 19:07:58.302003 2040 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f91af446-caf0-4b8c-913d-aacd595509af-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:07:58.979398 kubelet[2040]: I1002 19:07:58.979345 2040 scope.go:115] "RemoveContainer" containerID="68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477" Oct 2 19:07:58.982498 env[1139]: time="2023-10-02T19:07:58.982444196Z" level=info msg="RemoveContainer for \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\"" Oct 2 19:07:58.983099 systemd[1]: Removed slice kubepods-burstable-podf91af446_caf0_4b8c_913d_aacd595509af.slice. Oct 2 19:07:58.992732 env[1139]: time="2023-10-02T19:07:58.992611480Z" level=info msg="RemoveContainer for \"68e66537d5bad0a21de391d23fb9234baabf42bf440a611996aea03d24893477\" returns successfully" Oct 2 19:07:59.338571 kubelet[2040]: I1002 19:07:59.338484 2040 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=f91af446-caf0-4b8c-913d-aacd595509af path="/var/lib/kubelet/pods/f91af446-caf0-4b8c-913d-aacd595509af/volumes"