Oct 2 20:06:54.763717 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 20:06:54.763737 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 20:06:54.763745 kernel: efi: EFI v2.70 by EDK II Oct 2 20:06:54.763751 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 2 20:06:54.763756 kernel: random: crng init done Oct 2 20:06:54.763762 kernel: ACPI: Early table checksum verification disabled Oct 2 20:06:54.763769 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 2 20:06:54.763775 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 2 20:06:54.763781 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763786 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763792 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763797 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763802 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763807 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763815 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763821 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763827 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:06:54.763833 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 2 20:06:54.763839 kernel: NUMA: Failed to initialise from firmware Oct 2 20:06:54.763845 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.763850 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 2 20:06:54.763856 kernel: Zone ranges: Oct 2 20:06:54.763862 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.763869 kernel: DMA32 empty Oct 2 20:06:54.763874 kernel: Normal empty Oct 2 20:06:54.763880 kernel: Movable zone start for each node Oct 2 20:06:54.763886 kernel: Early memory node ranges Oct 2 20:06:54.763891 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 2 20:06:54.763897 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 2 20:06:54.763903 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 2 20:06:54.763909 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 2 20:06:54.763914 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 2 20:06:54.763920 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 2 20:06:54.763926 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 2 20:06:54.763931 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 2 20:06:54.763938 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 2 20:06:54.763944 kernel: psci: probing for conduit method from ACPI. Oct 2 20:06:54.763950 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 20:06:54.763955 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 20:06:54.763961 kernel: psci: Trusted OS migration not required Oct 2 20:06:54.763969 kernel: psci: SMC Calling Convention v1.1 Oct 2 20:06:54.763975 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 2 20:06:54.763983 kernel: ACPI: SRAT not present Oct 2 20:06:54.763989 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 20:06:54.763995 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 20:06:54.764002 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 2 20:06:54.764007 kernel: Detected PIPT I-cache on CPU0 Oct 2 20:06:54.764014 kernel: CPU features: detected: GIC system register CPU interface Oct 2 20:06:54.764020 kernel: CPU features: detected: Hardware dirty bit management Oct 2 20:06:54.764026 kernel: CPU features: detected: Spectre-v4 Oct 2 20:06:54.764032 kernel: CPU features: detected: Spectre-BHB Oct 2 20:06:54.764039 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 20:06:54.764045 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 20:06:54.764051 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 20:06:54.764058 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 2 20:06:54.764064 kernel: Policy zone: DMA Oct 2 20:06:54.764071 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:06:54.764077 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:06:54.764084 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:06:54.764090 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:06:54.764096 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:06:54.764102 kernel: Memory: 2459280K/2572288K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 113008K reserved, 0K cma-reserved) Oct 2 20:06:54.764110 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 20:06:54.764116 kernel: trace event string verifier disabled Oct 2 20:06:54.764122 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 20:06:54.764128 kernel: rcu: RCU event tracing is enabled. Oct 2 20:06:54.764135 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 20:06:54.764141 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 20:06:54.764147 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:06:54.764153 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:06:54.764159 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 20:06:54.764165 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 20:06:54.764171 kernel: GICv3: 256 SPIs implemented Oct 2 20:06:54.764178 kernel: GICv3: 0 Extended SPIs implemented Oct 2 20:06:54.764185 kernel: GICv3: Distributor has no Range Selector support Oct 2 20:06:54.764191 kernel: Root IRQ handler: gic_handle_irq Oct 2 20:06:54.764197 kernel: GICv3: 16 PPIs implemented Oct 2 20:06:54.764203 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 2 20:06:54.764209 kernel: ACPI: SRAT not present Oct 2 20:06:54.764215 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 2 20:06:54.764222 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 20:06:54.764228 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 2 20:06:54.764235 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 2 20:06:54.764241 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 2 20:06:54.764247 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.764255 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 20:06:54.764261 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 20:06:54.764267 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 20:06:54.764273 kernel: arm-pv: using stolen time PV Oct 2 20:06:54.764279 kernel: Console: colour dummy device 80x25 Oct 2 20:06:54.764285 kernel: ACPI: Core revision 20210730 Oct 2 20:06:54.764292 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 20:06:54.764298 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:06:54.764312 kernel: LSM: Security Framework initializing Oct 2 20:06:54.764318 kernel: SELinux: Initializing. Oct 2 20:06:54.764326 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.764333 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.764339 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:06:54.764345 kernel: Platform MSI: ITS@0x8080000 domain created Oct 2 20:06:54.764352 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 2 20:06:54.764358 kernel: Remapping and enabling EFI services. Oct 2 20:06:54.764365 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:06:54.764371 kernel: Detected PIPT I-cache on CPU1 Oct 2 20:06:54.764377 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 2 20:06:54.764384 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 2 20:06:54.764391 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.764397 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 20:06:54.764403 kernel: Detected PIPT I-cache on CPU2 Oct 2 20:06:54.764409 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 2 20:06:54.764416 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 2 20:06:54.764433 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.764439 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 2 20:06:54.764446 kernel: Detected PIPT I-cache on CPU3 Oct 2 20:06:54.764452 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 2 20:06:54.764460 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 2 20:06:54.764466 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 20:06:54.764472 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 2 20:06:54.764479 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 20:06:54.764489 kernel: SMP: Total of 4 processors activated. Oct 2 20:06:54.764497 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 20:06:54.764504 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 20:06:54.764510 kernel: CPU features: detected: Common not Private translations Oct 2 20:06:54.764517 kernel: CPU features: detected: CRC32 instructions Oct 2 20:06:54.764524 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 20:06:54.764530 kernel: CPU features: detected: LSE atomic instructions Oct 2 20:06:54.764537 kernel: CPU features: detected: Privileged Access Never Oct 2 20:06:54.764545 kernel: CPU features: detected: RAS Extension Support Oct 2 20:06:54.764551 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 2 20:06:54.764558 kernel: CPU: All CPU(s) started at EL1 Oct 2 20:06:54.764564 kernel: alternatives: patching kernel code Oct 2 20:06:54.764572 kernel: devtmpfs: initialized Oct 2 20:06:54.764578 kernel: KASLR enabled Oct 2 20:06:54.764585 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:06:54.764592 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.764598 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:06:54.764604 kernel: SMBIOS 3.0.0 present. Oct 2 20:06:54.764611 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 2 20:06:54.764617 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:06:54.764624 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 20:06:54.764631 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 20:06:54.764638 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 20:06:54.764645 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:06:54.764651 kernel: audit: type=2000 audit(0.048:1): state=initialized audit_enabled=0 res=1 Oct 2 20:06:54.764658 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:06:54.764665 kernel: cpuidle: using governor menu Oct 2 20:06:54.764671 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 20:06:54.764678 kernel: ASID allocator initialised with 32768 entries Oct 2 20:06:54.764685 kernel: ACPI: bus type PCI registered Oct 2 20:06:54.764691 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:06:54.764699 kernel: Serial: AMBA PL011 UART driver Oct 2 20:06:54.764706 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:06:54.764712 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 20:06:54.764719 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:06:54.764725 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 20:06:54.764732 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:06:54.764738 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 20:06:54.764745 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:06:54.764752 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:06:54.764759 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:06:54.764766 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:06:54.764773 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:06:54.764779 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:06:54.764786 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:06:54.764792 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:06:54.764799 kernel: ACPI: Interpreter enabled Oct 2 20:06:54.764805 kernel: ACPI: Using GIC for interrupt routing Oct 2 20:06:54.764812 kernel: ACPI: MCFG table detected, 1 entries Oct 2 20:06:54.764819 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 2 20:06:54.764826 kernel: printk: console [ttyAMA0] enabled Oct 2 20:06:54.764832 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:06:54.764975 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:06:54.765045 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 20:06:54.765105 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 20:06:54.765163 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 2 20:06:54.765224 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 2 20:06:54.765232 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 2 20:06:54.765239 kernel: PCI host bridge to bus 0000:00 Oct 2 20:06:54.765314 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 2 20:06:54.765375 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 20:06:54.765442 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 2 20:06:54.765498 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:06:54.765578 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 2 20:06:54.765654 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 20:06:54.765718 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 2 20:06:54.765776 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 2 20:06:54.765837 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 20:06:54.765897 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 2 20:06:54.765957 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 2 20:06:54.766020 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 2 20:06:54.766075 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 2 20:06:54.766128 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 20:06:54.766180 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 2 20:06:54.766189 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 20:06:54.766196 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 20:06:54.766203 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 20:06:54.766211 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 20:06:54.766218 kernel: iommu: Default domain type: Translated Oct 2 20:06:54.766224 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 20:06:54.766231 kernel: vgaarb: loaded Oct 2 20:06:54.766237 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:06:54.766244 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:06:54.766251 kernel: PTP clock support registered Oct 2 20:06:54.766257 kernel: Registered efivars operations Oct 2 20:06:54.766264 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 20:06:54.766270 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:06:54.766279 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:06:54.766286 kernel: pnp: PnP ACPI init Oct 2 20:06:54.766364 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 2 20:06:54.766374 kernel: pnp: PnP ACPI: found 1 devices Oct 2 20:06:54.766381 kernel: NET: Registered PF_INET protocol family Oct 2 20:06:54.766387 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:06:54.766394 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 20:06:54.766401 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:06:54.766409 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:06:54.766416 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 20:06:54.766431 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 20:06:54.766438 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.766446 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 20:06:54.766453 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:06:54.766459 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:06:54.766466 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 2 20:06:54.766475 kernel: kvm [1]: HYP mode not available Oct 2 20:06:54.766481 kernel: Initialise system trusted keyrings Oct 2 20:06:54.766488 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 20:06:54.766494 kernel: Key type asymmetric registered Oct 2 20:06:54.766501 kernel: Asymmetric key parser 'x509' registered Oct 2 20:06:54.766508 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:06:54.766514 kernel: io scheduler mq-deadline registered Oct 2 20:06:54.766521 kernel: io scheduler kyber registered Oct 2 20:06:54.766527 kernel: io scheduler bfq registered Oct 2 20:06:54.766534 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 20:06:54.766542 kernel: ACPI: button: Power Button [PWRB] Oct 2 20:06:54.766549 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 20:06:54.766618 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 2 20:06:54.766627 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:06:54.766633 kernel: thunder_xcv, ver 1.0 Oct 2 20:06:54.766640 kernel: thunder_bgx, ver 1.0 Oct 2 20:06:54.766647 kernel: nicpf, ver 1.0 Oct 2 20:06:54.766653 kernel: nicvf, ver 1.0 Oct 2 20:06:54.766721 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 20:06:54.766780 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T20:06:54 UTC (1696277214) Oct 2 20:06:54.766788 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:06:54.766795 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:06:54.766801 kernel: Segment Routing with IPv6 Oct 2 20:06:54.766808 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:06:54.766814 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:06:54.766821 kernel: Key type dns_resolver registered Oct 2 20:06:54.766827 kernel: registered taskstats version 1 Oct 2 20:06:54.766835 kernel: Loading compiled-in X.509 certificates Oct 2 20:06:54.766842 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 20:06:54.766848 kernel: Key type .fscrypt registered Oct 2 20:06:54.766855 kernel: Key type fscrypt-provisioning registered Oct 2 20:06:54.766861 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:06:54.766868 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:06:54.766874 kernel: ima: No architecture policies found Oct 2 20:06:54.766881 kernel: Freeing unused kernel memory: 34560K Oct 2 20:06:54.766887 kernel: Run /init as init process Oct 2 20:06:54.766895 kernel: with arguments: Oct 2 20:06:54.766902 kernel: /init Oct 2 20:06:54.766908 kernel: with environment: Oct 2 20:06:54.766915 kernel: HOME=/ Oct 2 20:06:54.766921 kernel: TERM=linux Oct 2 20:06:54.766928 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:06:54.766937 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:06:54.766945 systemd[1]: Detected virtualization kvm. Oct 2 20:06:54.766954 systemd[1]: Detected architecture arm64. Oct 2 20:06:54.766961 systemd[1]: Running in initrd. Oct 2 20:06:54.766968 systemd[1]: No hostname configured, using default hostname. Oct 2 20:06:54.766975 systemd[1]: Hostname set to . Oct 2 20:06:54.766982 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:06:54.766989 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:06:54.766996 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:06:54.767003 systemd[1]: Reached target cryptsetup.target. Oct 2 20:06:54.767012 systemd[1]: Reached target paths.target. Oct 2 20:06:54.767018 systemd[1]: Reached target slices.target. Oct 2 20:06:54.767025 systemd[1]: Reached target swap.target. Oct 2 20:06:54.767032 systemd[1]: Reached target timers.target. Oct 2 20:06:54.767040 systemd[1]: Listening on iscsid.socket. Oct 2 20:06:54.767047 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:06:54.767054 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:06:54.767063 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:06:54.767070 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:06:54.767078 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:06:54.767085 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:06:54.767093 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:06:54.767100 systemd[1]: Reached target sockets.target. Oct 2 20:06:54.767107 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:06:54.767114 systemd[1]: Finished network-cleanup.service. Oct 2 20:06:54.767121 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:06:54.767129 systemd[1]: Starting systemd-journald.service... Oct 2 20:06:54.767136 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:06:54.767144 systemd[1]: Starting systemd-resolved.service... Oct 2 20:06:54.767151 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:06:54.767158 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:06:54.767166 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:06:54.767173 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:06:54.767183 systemd-journald[289]: Journal started Oct 2 20:06:54.767253 systemd-journald[289]: Runtime Journal (/run/log/journal/a127679ad5194b38b6d5a6fe9ef4c59d) is 6.0M, max 48.7M, 42.6M free. Oct 2 20:06:54.759009 systemd-modules-load[290]: Inserted module 'overlay' Oct 2 20:06:54.768978 systemd[1]: Started systemd-journald.service. Oct 2 20:06:54.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.770062 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:06:54.773783 kernel: audit: type=1130 audit(1696277214.769:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.773938 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:06:54.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.780446 kernel: audit: type=1130 audit(1696277214.772:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.785704 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:06:54.790598 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:06:54.790615 kernel: audit: type=1130 audit(1696277214.786:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.790625 kernel: Bridge firewalling registered Oct 2 20:06:54.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.791189 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 2 20:06:54.793117 systemd-resolved[291]: Positive Trust Anchors: Oct 2 20:06:54.793124 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:06:54.793150 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:06:54.798088 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 2 20:06:54.807957 kernel: SCSI subsystem initialized Oct 2 20:06:54.807979 kernel: audit: type=1130 audit(1696277214.802:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.799378 systemd[1]: Started systemd-resolved.service. Oct 2 20:06:54.803506 systemd[1]: Reached target nss-lookup.target. Oct 2 20:06:54.813181 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:06:54.813203 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:06:54.813211 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:06:54.811585 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:06:54.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.814846 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:06:54.818622 kernel: audit: type=1130 audit(1696277214.813:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.818879 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 2 20:06:54.820294 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:06:54.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.824321 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:06:54.825760 kernel: audit: type=1130 audit(1696277214.821:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.827372 dracut-cmdline[309]: dracut-dracut-053 Oct 2 20:06:54.830215 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 20:06:54.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.835495 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:06:54.839482 kernel: audit: type=1130 audit(1696277214.835:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.898452 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:06:54.911446 kernel: iscsi: registered transport (tcp) Oct 2 20:06:54.921437 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:06:54.921454 kernel: QLogic iSCSI HBA Driver Oct 2 20:06:54.967692 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:06:54.971436 kernel: audit: type=1130 audit(1696277214.968:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:54.969384 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:06:55.017452 kernel: raid6: neonx8 gen() 13813 MB/s Oct 2 20:06:55.034439 kernel: raid6: neonx8 xor() 10836 MB/s Oct 2 20:06:55.051439 kernel: raid6: neonx4 gen() 13570 MB/s Oct 2 20:06:55.068436 kernel: raid6: neonx4 xor() 11322 MB/s Oct 2 20:06:55.085434 kernel: raid6: neonx2 gen() 12965 MB/s Oct 2 20:06:55.102440 kernel: raid6: neonx2 xor() 10231 MB/s Oct 2 20:06:55.119435 kernel: raid6: neonx1 gen() 10560 MB/s Oct 2 20:06:55.136436 kernel: raid6: neonx1 xor() 8783 MB/s Oct 2 20:06:55.153437 kernel: raid6: int64x8 gen() 6294 MB/s Oct 2 20:06:55.170436 kernel: raid6: int64x8 xor() 3544 MB/s Oct 2 20:06:55.187438 kernel: raid6: int64x4 gen() 7271 MB/s Oct 2 20:06:55.204436 kernel: raid6: int64x4 xor() 3854 MB/s Oct 2 20:06:55.221439 kernel: raid6: int64x2 gen() 6147 MB/s Oct 2 20:06:55.238439 kernel: raid6: int64x2 xor() 3322 MB/s Oct 2 20:06:55.255443 kernel: raid6: int64x1 gen() 5034 MB/s Oct 2 20:06:55.272561 kernel: raid6: int64x1 xor() 2642 MB/s Oct 2 20:06:55.272571 kernel: raid6: using algorithm neonx8 gen() 13813 MB/s Oct 2 20:06:55.272580 kernel: raid6: .... xor() 10836 MB/s, rmw enabled Oct 2 20:06:55.273686 kernel: raid6: using neon recovery algorithm Oct 2 20:06:55.284440 kernel: xor: measuring software checksum speed Oct 2 20:06:55.285438 kernel: 8regs : 17286 MB/sec Oct 2 20:06:55.286436 kernel: 32regs : 20744 MB/sec Oct 2 20:06:55.287766 kernel: arm64_neon : 27731 MB/sec Oct 2 20:06:55.287780 kernel: xor: using function: arm64_neon (27731 MB/sec) Oct 2 20:06:55.341444 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 20:06:55.353611 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:06:55.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.369385 kernel: audit: type=1130 audit(1696277215.353:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.357000 audit: BPF prog-id=7 op=LOAD Oct 2 20:06:55.369000 audit: BPF prog-id=8 op=LOAD Oct 2 20:06:55.376977 systemd[1]: Starting systemd-udevd.service... Oct 2 20:06:55.391932 systemd-udevd[491]: Using default interface naming scheme 'v252'. Oct 2 20:06:55.395258 systemd[1]: Started systemd-udevd.service. Oct 2 20:06:55.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.406579 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:06:55.419217 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Oct 2 20:06:55.451819 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:06:55.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.453556 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:06:55.487504 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:06:55.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:55.495953 kernel: hrtimer: interrupt took 5798000 ns Oct 2 20:06:55.526366 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 20:06:55.530448 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:55.543434 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (557) Oct 2 20:06:55.546249 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:06:55.547349 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:06:55.552147 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:06:55.555646 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:06:55.558963 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:06:55.560628 systemd[1]: Starting disk-uuid.service... Oct 2 20:06:55.570444 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:56.581077 disk-uuid[570]: The operation has completed successfully. Oct 2 20:06:56.582215 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:06:56.606262 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:06:56.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.606369 systemd[1]: Finished disk-uuid.service. Oct 2 20:06:56.610516 systemd[1]: Starting verity-setup.service... Oct 2 20:06:56.628477 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 20:06:56.651243 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:06:56.653564 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:06:56.656508 systemd[1]: Finished verity-setup.service. Oct 2 20:06:56.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.707121 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:06:56.708502 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:06:56.708015 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:06:56.708757 systemd[1]: Starting ignition-setup.service... Oct 2 20:06:56.710844 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:06:56.719978 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:06:56.720019 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:06:56.720030 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:06:56.729223 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:06:56.735228 systemd[1]: Finished ignition-setup.service. Oct 2 20:06:56.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.736862 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:06:56.813758 ignition[647]: Ignition 2.14.0 Oct 2 20:06:56.813768 ignition[647]: Stage: fetch-offline Oct 2 20:06:56.813808 ignition[647]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.813818 ignition[647]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.813954 ignition[647]: parsed url from cmdline: "" Oct 2 20:06:56.813958 ignition[647]: no config URL provided Oct 2 20:06:56.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.817591 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:06:56.819000 audit: BPF prog-id=9 op=LOAD Oct 2 20:06:56.813962 ignition[647]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:06:56.813970 ignition[647]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:06:56.820744 systemd[1]: Starting systemd-networkd.service... Oct 2 20:06:56.813987 ignition[647]: op(1): [started] loading QEMU firmware config module Oct 2 20:06:56.813992 ignition[647]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 20:06:56.824765 ignition[647]: op(1): [finished] loading QEMU firmware config module Oct 2 20:06:56.848283 systemd-networkd[746]: lo: Link UP Oct 2 20:06:56.848302 systemd-networkd[746]: lo: Gained carrier Oct 2 20:06:56.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.848903 systemd-networkd[746]: Enumeration completed Oct 2 20:06:56.849016 systemd[1]: Started systemd-networkd.service. Oct 2 20:06:56.849275 systemd-networkd[746]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:06:56.850268 systemd[1]: Reached target network.target. Oct 2 20:06:56.850758 systemd-networkd[746]: eth0: Link UP Oct 2 20:06:56.850765 systemd-networkd[746]: eth0: Gained carrier Oct 2 20:06:56.852526 systemd[1]: Starting iscsiuio.service... Oct 2 20:06:56.862254 systemd[1]: Started iscsiuio.service. Oct 2 20:06:56.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.863968 systemd[1]: Starting iscsid.service... Oct 2 20:06:56.868486 iscsid[751]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:06:56.868486 iscsid[751]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:06:56.868486 iscsid[751]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:06:56.868486 iscsid[751]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:06:56.868486 iscsid[751]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:06:56.868486 iscsid[751]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:06:56.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.873524 systemd[1]: Started iscsid.service. Oct 2 20:06:56.876870 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:06:56.881444 systemd-networkd[746]: eth0: DHCPv4 address 10.0.0.7/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 20:06:56.886919 ignition[647]: parsing config with SHA512: a680aaa1c94ff906b9fd8f8bd2fa04e87602dfd6ea80db4d15df94d37f9217a2c2deda9a5477567b6cd414f3831204f4a0425c7a9d68f28762f26a86480755b8 Oct 2 20:06:56.888910 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:06:56.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.890079 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:06:56.891587 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:06:56.893257 systemd[1]: Reached target remote-fs.target. Oct 2 20:06:56.895456 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:06:56.904662 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:06:56.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.917577 unknown[647]: fetched base config from "system" Oct 2 20:06:56.917591 unknown[647]: fetched user config from "qemu" Oct 2 20:06:56.918049 ignition[647]: fetch-offline: fetch-offline passed Oct 2 20:06:56.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.919415 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:06:56.918103 ignition[647]: Ignition finished successfully Oct 2 20:06:56.921049 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 20:06:56.921801 systemd[1]: Starting ignition-kargs.service... Oct 2 20:06:56.932146 ignition[767]: Ignition 2.14.0 Oct 2 20:06:56.932155 ignition[767]: Stage: kargs Oct 2 20:06:56.932248 ignition[767]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.932258 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.934579 systemd[1]: Finished ignition-kargs.service. Oct 2 20:06:56.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.933121 ignition[767]: kargs: kargs passed Oct 2 20:06:56.933162 ignition[767]: Ignition finished successfully Oct 2 20:06:56.936819 systemd[1]: Starting ignition-disks.service... Oct 2 20:06:56.944789 ignition[773]: Ignition 2.14.0 Oct 2 20:06:56.944799 ignition[773]: Stage: disks Oct 2 20:06:56.944887 ignition[773]: no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:56.946887 systemd[1]: Finished ignition-disks.service. Oct 2 20:06:56.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.944897 ignition[773]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:56.948538 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:06:56.945867 ignition[773]: disks: disks passed Oct 2 20:06:56.949858 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:06:56.945909 ignition[773]: Ignition finished successfully Oct 2 20:06:56.951542 systemd[1]: Reached target local-fs.target. Oct 2 20:06:56.952936 systemd[1]: Reached target sysinit.target. Oct 2 20:06:56.954093 systemd[1]: Reached target basic.target. Oct 2 20:06:56.956253 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:06:56.966774 systemd-resolved[291]: Detected conflict on linux IN A 10.0.0.7 Oct 2 20:06:56.966787 systemd-resolved[291]: Hostname conflict, changing published hostname from 'linux' to 'linux3'. Oct 2 20:06:56.969776 systemd-fsck[781]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 20:06:56.973392 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:06:56.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:56.976093 systemd[1]: Mounting sysroot.mount... Oct 2 20:06:56.985430 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:06:56.985728 systemd[1]: Mounted sysroot.mount. Oct 2 20:06:56.986541 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:06:56.989151 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:06:56.990118 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:06:56.990157 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:06:56.990179 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:06:56.992416 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:06:56.993839 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:06:56.999349 initrd-setup-root[791]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:06:57.004700 initrd-setup-root[799]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:06:57.009365 initrd-setup-root[807]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:06:57.014214 initrd-setup-root[815]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:06:57.043906 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:06:57.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.045542 systemd[1]: Starting ignition-mount.service... Oct 2 20:06:57.046902 systemd[1]: Starting sysroot-boot.service... Oct 2 20:06:57.052871 bash[832]: umount: /sysroot/usr/share/oem: not mounted. Oct 2 20:06:57.063215 ignition[834]: INFO : Ignition 2.14.0 Oct 2 20:06:57.063215 ignition[834]: INFO : Stage: mount Oct 2 20:06:57.064770 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:57.064770 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:57.064770 ignition[834]: INFO : mount: mount passed Oct 2 20:06:57.064770 ignition[834]: INFO : Ignition finished successfully Oct 2 20:06:57.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.066697 systemd[1]: Finished ignition-mount.service. Oct 2 20:06:57.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:57.068876 systemd[1]: Finished sysroot-boot.service. Oct 2 20:06:57.663660 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:06:57.671253 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (842) Oct 2 20:06:57.671301 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 20:06:57.671312 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:06:57.672522 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:06:57.676141 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:06:57.677769 systemd[1]: Starting ignition-files.service... Oct 2 20:06:57.693539 ignition[862]: INFO : Ignition 2.14.0 Oct 2 20:06:57.693539 ignition[862]: INFO : Stage: files Oct 2 20:06:57.695048 ignition[862]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:06:57.695048 ignition[862]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:06:57.695048 ignition[862]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:06:57.701140 ignition[862]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:06:57.701140 ignition[862]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:06:57.704866 ignition[862]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:06:57.706190 ignition[862]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:06:57.707642 unknown[862]: wrote ssh authorized keys file for user: core Oct 2 20:06:57.708718 ignition[862]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:06:57.708718 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:06:57.708718 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 20:06:57.885954 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:06:58.139846 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 20:06:58.142774 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 20:06:58.142774 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:06:58.142774 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 20:06:58.237970 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:06:58.384502 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 20:06:58.387490 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 20:06:58.387490 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:06:58.387490 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 20:06:58.435352 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:06:58.571687 systemd-networkd[746]: eth0: Gained IPv6LL Oct 2 20:06:58.756232 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 20:06:58.756232 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:06:58.760921 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:06:58.760921 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 20:06:58.805691 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:07:00.258358 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 20:07:00.261607 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:07:00.261607 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:07:00.261607 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 20:07:00.297597 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:07:00.912678 ignition[862]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 20:07:00.915501 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:07:00.915501 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:07:00.915501 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:07:00.915501 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:07:00.915501 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 20:07:00.985803 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:07:01.046842 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:07:01.046842 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:07:01.050630 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:07:01.050630 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:07:01.050630 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(12): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:07:01.050630 ignition[862]: INFO : files: op(13): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:07:01.080594 ignition[862]: INFO : files: op(13): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:07:01.080594 ignition[862]: INFO : files: op(14): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 20:07:01.080594 ignition[862]: INFO : files: op(14): op(15): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 20:07:01.111313 ignition[862]: INFO : files: op(14): op(15): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 20:07:01.118558 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:07:01.118585 kernel: audit: type=1130 audit(1696277221.114:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.118644 ignition[862]: INFO : files: op(14): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 20:07:01.118644 ignition[862]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:07:01.118644 ignition[862]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:07:01.118644 ignition[862]: INFO : files: files passed Oct 2 20:07:01.118644 ignition[862]: INFO : Ignition finished successfully Oct 2 20:07:01.113929 systemd[1]: Finished ignition-files.service. Oct 2 20:07:01.119355 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:07:01.121045 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:07:01.137335 kernel: audit: type=1130 audit(1696277221.130:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.137363 kernel: audit: type=1131 audit(1696277221.130:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.137513 initrd-setup-root-after-ignition[887]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 20:07:01.122041 systemd[1]: Starting ignition-quench.service... Oct 2 20:07:01.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.148944 initrd-setup-root-after-ignition[889]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:07:01.151056 kernel: audit: type=1130 audit(1696277221.139:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.129305 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:07:01.129382 systemd[1]: Finished ignition-quench.service. Oct 2 20:07:01.138119 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:07:01.140467 systemd[1]: Reached target ignition-complete.target. Oct 2 20:07:01.150341 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:07:01.164967 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:07:01.165066 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:07:01.171651 kernel: audit: type=1130 audit(1696277221.166:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.171679 kernel: audit: type=1131 audit(1696277221.166:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.166753 systemd[1]: Reached target initrd-fs.target. Oct 2 20:07:01.172305 systemd[1]: Reached target initrd.target. Oct 2 20:07:01.173765 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:07:01.174486 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:07:01.186236 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:07:01.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.187818 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:07:01.191232 kernel: audit: type=1130 audit(1696277221.186:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.196520 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:07:01.197345 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:07:01.198761 systemd[1]: Stopped target timers.target. Oct 2 20:07:01.200201 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:07:01.204447 kernel: audit: type=1131 audit(1696277221.201:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.200316 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:07:01.201557 systemd[1]: Stopped target initrd.target. Oct 2 20:07:01.205348 systemd[1]: Stopped target basic.target. Oct 2 20:07:01.206600 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:07:01.207872 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:07:01.209265 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:07:01.210692 systemd[1]: Stopped target remote-fs.target. Oct 2 20:07:01.212119 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:07:01.213526 systemd[1]: Stopped target sysinit.target. Oct 2 20:07:01.214863 systemd[1]: Stopped target local-fs.target. Oct 2 20:07:01.216155 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:07:01.217392 systemd[1]: Stopped target swap.target. Oct 2 20:07:01.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.218586 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:07:01.224156 kernel: audit: type=1131 audit(1696277221.219:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.218694 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:07:01.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.220081 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:07:01.229047 kernel: audit: type=1131 audit(1696277221.224:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.223410 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:07:01.223561 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:07:01.224967 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:07:01.225062 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:07:01.228561 systemd[1]: Stopped target paths.target. Oct 2 20:07:01.229719 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:07:01.233443 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:07:01.234616 systemd[1]: Stopped target slices.target. Oct 2 20:07:01.236209 systemd[1]: Stopped target sockets.target. Oct 2 20:07:01.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.237768 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:07:01.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.237876 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:07:01.243254 iscsid[751]: iscsid shutting down. Oct 2 20:07:01.239337 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:07:01.239447 systemd[1]: Stopped ignition-files.service. Oct 2 20:07:01.241439 systemd[1]: Stopping ignition-mount.service... Oct 2 20:07:01.242572 systemd[1]: Stopping iscsid.service... Oct 2 20:07:01.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.244383 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:07:01.245923 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:07:01.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.250933 ignition[902]: INFO : Ignition 2.14.0 Oct 2 20:07:01.250933 ignition[902]: INFO : Stage: umount Oct 2 20:07:01.250933 ignition[902]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 20:07:01.250933 ignition[902]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 20:07:01.250933 ignition[902]: INFO : umount: umount passed Oct 2 20:07:01.250933 ignition[902]: INFO : Ignition finished successfully Oct 2 20:07:01.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.246069 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:07:01.247333 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:07:01.247443 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:07:01.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.250084 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:07:01.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.250186 systemd[1]: Stopped iscsid.service. Oct 2 20:07:01.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.251896 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:07:01.251974 systemd[1]: Stopped ignition-mount.service. Oct 2 20:07:01.253115 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:07:01.253180 systemd[1]: Closed iscsid.socket. Oct 2 20:07:01.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.254012 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:07:01.254093 systemd[1]: Stopped ignition-disks.service. Oct 2 20:07:01.255742 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:07:01.255779 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:07:01.257375 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:07:01.257412 systemd[1]: Stopped ignition-setup.service. Oct 2 20:07:01.259579 systemd[1]: Stopping iscsiuio.service... Oct 2 20:07:01.262648 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:07:01.263071 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:07:01.263161 systemd[1]: Stopped iscsiuio.service. Oct 2 20:07:01.264718 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:07:01.264797 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:07:01.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.266239 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:07:01.266333 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:07:01.268041 systemd[1]: Stopped target network.target. Oct 2 20:07:01.269407 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:07:01.269488 systemd[1]: Closed iscsiuio.socket. Oct 2 20:07:01.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.270649 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:07:01.270689 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:07:01.272111 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:07:01.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.273223 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:07:01.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.282348 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:07:01.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.294000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:07:01.282450 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:07:01.285466 systemd-networkd[746]: eth0: DHCPv6 lease lost Oct 2 20:07:01.286782 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:07:01.299000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:07:01.286870 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:07:01.288307 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:07:01.288336 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:07:01.289967 systemd[1]: Stopping network-cleanup.service... Oct 2 20:07:01.290687 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:07:01.290741 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:07:01.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.292223 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:07:01.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.292264 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:07:01.294359 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:07:01.294399 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:07:01.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.295316 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:07:01.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.300315 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:07:01.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.303925 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:07:01.304016 systemd[1]: Stopped network-cleanup.service. Oct 2 20:07:01.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.305688 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:07:01.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.305803 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:07:01.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.307051 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:07:01.307083 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:07:01.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:01.308350 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:07:01.308383 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:07:01.309628 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:07:01.309667 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:07:01.311157 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:07:01.311195 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:07:01.312513 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:07:01.312551 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:07:01.314504 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:07:01.315625 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:07:01.315681 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:07:01.317854 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:07:01.317894 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:07:01.318709 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:07:01.318746 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:07:01.320892 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 20:07:01.321259 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:07:01.321353 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:07:01.322688 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:07:01.324635 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:07:01.331679 systemd[1]: Switching root. Oct 2 20:07:01.348915 systemd-journald[289]: Journal stopped Oct 2 20:07:03.526027 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 2 20:07:03.526133 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:07:03.526146 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:07:03.526158 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:07:03.526168 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:07:03.526178 kernel: SELinux: policy capability open_perms=1 Oct 2 20:07:03.526187 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:07:03.526196 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:07:03.526206 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:07:03.526215 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:07:03.526225 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:07:03.526244 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:07:03.526256 systemd[1]: Successfully loaded SELinux policy in 34.805ms. Oct 2 20:07:03.526298 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.879ms. Oct 2 20:07:03.526313 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:07:03.526324 systemd[1]: Detected virtualization kvm. Oct 2 20:07:03.526345 systemd[1]: Detected architecture arm64. Oct 2 20:07:03.526356 systemd[1]: Detected first boot. Oct 2 20:07:03.526366 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:07:03.526378 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:07:03.526389 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:03.526400 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:03.526413 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:03.526434 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:07:03.526447 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:07:03.526458 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:07:03.526471 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:07:03.526481 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:07:03.526491 systemd[1]: Created slice system-getty.slice. Oct 2 20:07:03.526503 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:07:03.526513 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:07:03.526524 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:07:03.526535 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:07:03.526545 systemd[1]: Created slice user.slice. Oct 2 20:07:03.526555 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:07:03.526569 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:07:03.526581 systemd[1]: Set up automount boot.automount. Oct 2 20:07:03.526592 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:07:03.526602 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:07:03.526613 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:07:03.526623 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:07:03.526634 systemd[1]: Reached target integritysetup.target. Oct 2 20:07:03.526645 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:07:03.526656 systemd[1]: Reached target remote-fs.target. Oct 2 20:07:03.526666 systemd[1]: Reached target slices.target. Oct 2 20:07:03.526676 systemd[1]: Reached target swap.target. Oct 2 20:07:03.526686 systemd[1]: Reached target torcx.target. Oct 2 20:07:03.526696 systemd[1]: Reached target veritysetup.target. Oct 2 20:07:03.526707 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:07:03.526718 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:07:03.526729 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:07:03.526739 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:07:03.526751 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:07:03.526762 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:07:03.526783 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:07:03.526794 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:07:03.526807 systemd[1]: Mounting media.mount... Oct 2 20:07:03.526818 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:07:03.526829 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:07:03.526840 systemd[1]: Mounting tmp.mount... Oct 2 20:07:03.526850 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:07:03.526862 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:07:03.526872 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:07:03.526894 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:07:03.526904 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:07:03.526915 systemd[1]: Starting modprobe@drm.service... Oct 2 20:07:03.526925 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:07:03.526936 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:07:03.526946 systemd[1]: Starting modprobe@loop.service... Oct 2 20:07:03.526956 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:07:03.526968 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:07:03.526978 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:07:03.527000 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:07:03.527010 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:07:03.527020 systemd[1]: Stopped systemd-journald.service. Oct 2 20:07:03.527031 systemd[1]: Starting systemd-journald.service... Oct 2 20:07:03.527042 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:07:03.527054 kernel: fuse: init (API version 7.34) Oct 2 20:07:03.527064 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:07:03.527075 kernel: loop: module loaded Oct 2 20:07:03.527085 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:07:03.527096 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:07:03.527106 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:07:03.527116 systemd[1]: Stopped verity-setup.service. Oct 2 20:07:03.527127 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:07:03.527137 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:07:03.527148 systemd[1]: Mounted media.mount. Oct 2 20:07:03.527158 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:07:03.527169 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:07:03.527180 systemd[1]: Mounted tmp.mount. Oct 2 20:07:03.527190 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:07:03.527200 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:07:03.527211 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:07:03.527221 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:07:03.527232 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:07:03.527244 systemd-journald[998]: Journal started Oct 2 20:07:03.527290 systemd-journald[998]: Runtime Journal (/run/log/journal/a127679ad5194b38b6d5a6fe9ef4c59d) is 6.0M, max 48.7M, 42.6M free. Oct 2 20:07:01.410000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:07:01.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:07:01.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:07:01.597000 audit: BPF prog-id=10 op=LOAD Oct 2 20:07:01.597000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:07:01.597000 audit: BPF prog-id=11 op=LOAD Oct 2 20:07:01.597000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:07:03.368000 audit: BPF prog-id=12 op=LOAD Oct 2 20:07:03.368000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:07:03.368000 audit: BPF prog-id=13 op=LOAD Oct 2 20:07:03.368000 audit: BPF prog-id=14 op=LOAD Oct 2 20:07:03.368000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:07:03.368000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=15 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=16 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=17 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=18 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=19 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=20 op=LOAD Oct 2 20:07:03.369000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:07:03.369000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:07:03.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.380000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:07:03.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.479000 audit: BPF prog-id=21 op=LOAD Oct 2 20:07:03.479000 audit: BPF prog-id=22 op=LOAD Oct 2 20:07:03.479000 audit: BPF prog-id=23 op=LOAD Oct 2 20:07:03.479000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:07:03.479000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:07:03.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.524000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:07:03.524000 audit[998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffd7cd76c0 a2=4000 a3=1 items=0 ppid=1 pid=998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:03.524000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:07:03.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.367208 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:07:01.644404 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:03.367221 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 20:07:01.645017 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:07:03.370816 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:07:01.645036 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:07:01.645067 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:07:01.645077 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:07:01.645109 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:07:01.645121 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:07:01.645338 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:07:01.645373 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:07:01.645385 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:07:01.647662 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:07:01.647707 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:07:01.647725 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:07:01.647740 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:07:01.647756 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:07:01.647769 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:07:03.095639 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:03.529782 systemd[1]: Started systemd-journald.service. Oct 2 20:07:03.095910 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:03.096006 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:03.096167 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:07:03.096219 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:07:03.096287 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2023-10-02T20:07:03Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:07:03.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.530599 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:07:03.530743 systemd[1]: Finished modprobe@drm.service. Oct 2 20:07:03.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.531835 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:07:03.531969 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:07:03.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.533140 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:07:03.533599 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:07:03.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.534683 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:07:03.534841 systemd[1]: Finished modprobe@loop.service. Oct 2 20:07:03.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.536073 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:07:03.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.537259 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:07:03.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.538504 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:07:03.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.539911 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:07:03.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.541345 systemd[1]: Reached target network-pre.target. Oct 2 20:07:03.543687 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:07:03.545859 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:07:03.546875 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:07:03.548930 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:07:03.551228 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:07:03.552084 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:07:03.553442 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:07:03.554536 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:07:03.555750 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:07:03.561178 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:07:03.565730 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:07:03.567217 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:07:03.573777 systemd-journald[998]: Time spent on flushing to /var/log/journal/a127679ad5194b38b6d5a6fe9ef4c59d is 12.662ms for 1009 entries. Oct 2 20:07:03.573777 systemd-journald[998]: System Journal (/var/log/journal/a127679ad5194b38b6d5a6fe9ef4c59d) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:07:03.613928 systemd-journald[998]: Received client request to flush runtime journal. Oct 2 20:07:03.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.576639 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:07:03.577695 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:07:03.615755 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:07:03.582391 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:07:03.584880 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:07:03.588726 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:07:03.615368 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:07:03.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.618614 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:07:03.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.621171 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:07:03.644582 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:07:03.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.954000 audit: BPF prog-id=24 op=LOAD Oct 2 20:07:03.954000 audit: BPF prog-id=25 op=LOAD Oct 2 20:07:03.954000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:07:03.954000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:07:03.953377 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:07:03.955698 systemd[1]: Starting systemd-udevd.service... Oct 2 20:07:03.974809 systemd-udevd[1040]: Using default interface naming scheme 'v252'. Oct 2 20:07:03.991264 systemd[1]: Started systemd-udevd.service. Oct 2 20:07:03.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:03.993000 audit: BPF prog-id=26 op=LOAD Oct 2 20:07:03.997199 systemd[1]: Starting systemd-networkd.service... Oct 2 20:07:04.005278 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:07:04.004000 audit: BPF prog-id=27 op=LOAD Oct 2 20:07:04.004000 audit: BPF prog-id=28 op=LOAD Oct 2 20:07:04.004000 audit: BPF prog-id=29 op=LOAD Oct 2 20:07:04.014853 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 20:07:04.041482 systemd[1]: Started systemd-userdbd.service. Oct 2 20:07:04.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.055510 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:07:04.100258 systemd-networkd[1059]: lo: Link UP Oct 2 20:07:04.100275 systemd-networkd[1059]: lo: Gained carrier Oct 2 20:07:04.100619 systemd-networkd[1059]: Enumeration completed Oct 2 20:07:04.100728 systemd[1]: Started systemd-networkd.service. Oct 2 20:07:04.100729 systemd-networkd[1059]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:07:04.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.103597 systemd-networkd[1059]: eth0: Link UP Oct 2 20:07:04.103607 systemd-networkd[1059]: eth0: Gained carrier Oct 2 20:07:04.103802 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:07:04.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.105905 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:07:04.122528 systemd-networkd[1059]: eth0: DHCPv4 address 10.0.0.7/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 20:07:04.134116 lvm[1073]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:07:04.155359 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:07:04.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.156459 systemd[1]: Reached target cryptsetup.target. Oct 2 20:07:04.158433 systemd[1]: Starting lvm2-activation.service... Oct 2 20:07:04.162414 lvm[1074]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:07:04.183191 systemd[1]: Finished lvm2-activation.service. Oct 2 20:07:04.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.184157 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:07:04.185024 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:07:04.185058 systemd[1]: Reached target local-fs.target. Oct 2 20:07:04.185856 systemd[1]: Reached target machines.target. Oct 2 20:07:04.187821 systemd[1]: Starting ldconfig.service... Oct 2 20:07:04.188794 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.188857 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:04.189893 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:07:04.191853 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:07:04.193893 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:07:04.194953 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.195002 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.196049 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:07:04.198281 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1077 (bootctl) Oct 2 20:07:04.200593 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:07:04.202855 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:07:04.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.214852 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:07:04.228076 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:07:04.229179 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:07:04.300487 systemd-fsck[1086]: fsck.fat 4.2 (2021-01-31) Oct 2 20:07:04.300487 systemd-fsck[1086]: /dev/vda1: 236 files, 113463/258078 clusters Oct 2 20:07:04.302850 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:07:04.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.305557 systemd[1]: Mounting boot.mount... Oct 2 20:07:04.339503 systemd[1]: Mounted boot.mount. Oct 2 20:07:04.346748 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:07:04.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.348168 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:07:04.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.393309 ldconfig[1076]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:07:04.397814 systemd[1]: Finished ldconfig.service. Oct 2 20:07:04.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.431809 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:07:04.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.434049 systemd[1]: Starting audit-rules.service... Oct 2 20:07:04.435824 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:07:04.437667 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:07:04.439000 audit: BPF prog-id=30 op=LOAD Oct 2 20:07:04.440408 systemd[1]: Starting systemd-resolved.service... Oct 2 20:07:04.441000 audit: BPF prog-id=31 op=LOAD Oct 2 20:07:04.442769 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:07:04.447281 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:07:04.448610 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:07:04.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.449742 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:07:04.451000 audit[1102]: SYSTEM_BOOT pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.454748 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:07:04.458834 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:07:04.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.461038 systemd[1]: Starting systemd-update-done.service... Oct 2 20:07:04.468811 systemd[1]: Finished systemd-update-done.service. Oct 2 20:07:04.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:04.479000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:07:04.479000 audit[1112]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffca5961e0 a2=420 a3=0 items=0 ppid=1091 pid=1112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:04.479000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:07:04.480096 augenrules[1112]: No rules Oct 2 20:07:04.480694 systemd[1]: Finished audit-rules.service. Oct 2 20:07:04.495200 systemd-resolved[1095]: Positive Trust Anchors: Oct 2 20:07:04.495210 systemd-resolved[1095]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:07:04.495236 systemd-resolved[1095]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:07:04.496231 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:07:04.497086 systemd-timesyncd[1096]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 20:07:04.497362 systemd[1]: Reached target time-set.target. Oct 2 20:07:04.497462 systemd-timesyncd[1096]: Initial clock synchronization to Mon 2023-10-02 20:07:04.878481 UTC. Oct 2 20:07:04.505368 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:07:04.512571 systemd-resolved[1095]: Defaulting to hostname 'linux'. Oct 2 20:07:04.513966 systemd[1]: Started systemd-resolved.service. Oct 2 20:07:04.514868 systemd[1]: Reached target network.target. Oct 2 20:07:04.515649 systemd[1]: Reached target nss-lookup.target. Oct 2 20:07:04.516440 systemd[1]: Reached target sysinit.target. Oct 2 20:07:04.517258 systemd[1]: Started motdgen.path. Oct 2 20:07:04.518013 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:07:04.519255 systemd[1]: Started logrotate.timer. Oct 2 20:07:04.520122 systemd[1]: Started mdadm.timer. Oct 2 20:07:04.520827 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:07:04.521671 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:07:04.521704 systemd[1]: Reached target paths.target. Oct 2 20:07:04.522433 systemd[1]: Reached target timers.target. Oct 2 20:07:04.523547 systemd[1]: Listening on dbus.socket. Oct 2 20:07:04.525193 systemd[1]: Starting docker.socket... Oct 2 20:07:04.528465 systemd[1]: Listening on sshd.socket. Oct 2 20:07:04.529274 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:04.529694 systemd[1]: Listening on docker.socket. Oct 2 20:07:04.530545 systemd[1]: Reached target sockets.target. Oct 2 20:07:04.531291 systemd[1]: Reached target basic.target. Oct 2 20:07:04.532088 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.532119 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:07:04.533086 systemd[1]: Starting containerd.service... Oct 2 20:07:04.534799 systemd[1]: Starting dbus.service... Oct 2 20:07:04.536339 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:07:04.538229 systemd[1]: Starting extend-filesystems.service... Oct 2 20:07:04.539092 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:07:04.540256 systemd[1]: Starting motdgen.service... Oct 2 20:07:04.541957 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:07:04.543774 systemd[1]: Starting prepare-critools.service... Oct 2 20:07:04.547113 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:07:04.549009 jq[1122]: false Oct 2 20:07:04.549490 systemd[1]: Starting sshd-keygen.service... Oct 2 20:07:04.552392 systemd[1]: Starting systemd-logind.service... Oct 2 20:07:04.553544 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:07:04.553610 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:07:04.554032 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:07:04.554916 systemd[1]: Starting update-engine.service... Oct 2 20:07:04.557391 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:07:04.559897 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:07:04.560053 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:07:04.560206 jq[1136]: true Oct 2 20:07:04.563676 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:07:04.563838 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:07:04.572285 tar[1140]: ./ Oct 2 20:07:04.572285 tar[1140]: ./loopback Oct 2 20:07:04.572820 jq[1142]: true Oct 2 20:07:04.573851 tar[1141]: crictl Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda1 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda2 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda3 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found usr Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda4 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda6 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda7 Oct 2 20:07:04.586108 extend-filesystems[1123]: Found vda9 Oct 2 20:07:04.586108 extend-filesystems[1123]: Checking size of /dev/vda9 Oct 2 20:07:04.586514 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:07:04.586665 systemd[1]: Finished motdgen.service. Oct 2 20:07:04.617995 dbus-daemon[1121]: [system] SELinux support is enabled Oct 2 20:07:04.618928 systemd[1]: Started dbus.service. Oct 2 20:07:04.621492 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:07:04.621520 systemd[1]: Reached target system-config.target. Oct 2 20:07:04.622370 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:07:04.622384 systemd[1]: Reached target user-config.target. Oct 2 20:07:04.635039 extend-filesystems[1123]: Old size kept for /dev/vda9 Oct 2 20:07:04.635993 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:07:04.636147 systemd[1]: Finished extend-filesystems.service. Oct 2 20:07:04.651517 tar[1140]: ./bandwidth Oct 2 20:07:04.661098 systemd-logind[1133]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 20:07:04.661473 bash[1173]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:07:04.663653 systemd-logind[1133]: New seat seat0. Oct 2 20:07:04.663900 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:07:04.669949 systemd[1]: Started systemd-logind.service. Oct 2 20:07:04.680560 update_engine[1135]: I1002 20:07:04.680307 1135 main.cc:92] Flatcar Update Engine starting Oct 2 20:07:04.683060 systemd[1]: Started update-engine.service. Oct 2 20:07:04.685755 systemd[1]: Started locksmithd.service. Oct 2 20:07:04.686992 update_engine[1135]: I1002 20:07:04.686962 1135 update_check_scheduler.cc:74] Next update check in 4m23s Oct 2 20:07:04.694594 tar[1140]: ./ptp Oct 2 20:07:04.722486 env[1143]: time="2023-10-02T20:07:04.722353440Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:07:04.731014 tar[1140]: ./vlan Oct 2 20:07:04.753964 env[1143]: time="2023-10-02T20:07:04.753912400Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:07:04.754099 env[1143]: time="2023-10-02T20:07:04.754078920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755550 env[1143]: time="2023-10-02T20:07:04.755355840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755550 env[1143]: time="2023-10-02T20:07:04.755544320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755779 env[1143]: time="2023-10-02T20:07:04.755750320Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755779 env[1143]: time="2023-10-02T20:07:04.755775400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755843 env[1143]: time="2023-10-02T20:07:04.755789560Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:07:04.755843 env[1143]: time="2023-10-02T20:07:04.755799240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.755887 env[1143]: time="2023-10-02T20:07:04.755874480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.756075 env[1143]: time="2023-10-02T20:07:04.756050040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:07:04.756230 env[1143]: time="2023-10-02T20:07:04.756207120Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:07:04.756230 env[1143]: time="2023-10-02T20:07:04.756226120Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:07:04.756307 env[1143]: time="2023-10-02T20:07:04.756288040Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:07:04.756307 env[1143]: time="2023-10-02T20:07:04.756305680Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:07:04.759584 env[1143]: time="2023-10-02T20:07:04.759546840Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:07:04.759648 env[1143]: time="2023-10-02T20:07:04.759587960Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:07:04.759648 env[1143]: time="2023-10-02T20:07:04.759601680Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:07:04.759648 env[1143]: time="2023-10-02T20:07:04.759633840Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.759720 env[1143]: time="2023-10-02T20:07:04.759648360Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.759720 env[1143]: time="2023-10-02T20:07:04.759661600Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.759720 env[1143]: time="2023-10-02T20:07:04.759673640Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760015 env[1143]: time="2023-10-02T20:07:04.759993560Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760050 env[1143]: time="2023-10-02T20:07:04.760015400Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760050 env[1143]: time="2023-10-02T20:07:04.760030920Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760050 env[1143]: time="2023-10-02T20:07:04.760043640Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760112 env[1143]: time="2023-10-02T20:07:04.760055560Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:07:04.760190 env[1143]: time="2023-10-02T20:07:04.760169240Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:07:04.760280 env[1143]: time="2023-10-02T20:07:04.760254640Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:07:04.760524 env[1143]: time="2023-10-02T20:07:04.760505920Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:07:04.760571 env[1143]: time="2023-10-02T20:07:04.760534040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760571 env[1143]: time="2023-10-02T20:07:04.760547360Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.760723 env[1143]: time="2023-10-02T20:07:04.760706040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760723 env[1143]: time="2023-10-02T20:07:04.760721920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760778 env[1143]: time="2023-10-02T20:07:04.760734160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760778 env[1143]: time="2023-10-02T20:07:04.760745760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760778 env[1143]: time="2023-10-02T20:07:04.760757760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760778 env[1143]: time="2023-10-02T20:07:04.760771080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760858 env[1143]: time="2023-10-02T20:07:04.760781920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760858 env[1143]: time="2023-10-02T20:07:04.760793120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760858 env[1143]: time="2023-10-02T20:07:04.760805760Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.760941 env[1143]: time="2023-10-02T20:07:04.760921720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760970 env[1143]: time="2023-10-02T20:07:04.760942680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760970 env[1143]: time="2023-10-02T20:07:04.760956160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.760970 env[1143]: time="2023-10-02T20:07:04.760967760Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:07:04.761026 env[1143]: time="2023-10-02T20:07:04.760981360Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:07:04.761026 env[1143]: time="2023-10-02T20:07:04.760994160Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:07:04.761026 env[1143]: time="2023-10-02T20:07:04.761010760Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:07:04.761087 env[1143]: time="2023-10-02T20:07:04.761042600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:07:04.761300 env[1143]: time="2023-10-02T20:07:04.761239840Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.761303920Z" level=info msg="Connect containerd service" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.761338000Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.762190360Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.762671080Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.762707760Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.762750680Z" level=info msg="containerd successfully booted in 0.044688s" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763241080Z" level=info msg="Start subscribing containerd event" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763288880Z" level=info msg="Start recovering state" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763344920Z" level=info msg="Start event monitor" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763382680Z" level=info msg="Start snapshots syncer" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763393200Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:07:04.765718 env[1143]: time="2023-10-02T20:07:04.763400560Z" level=info msg="Start streaming server" Oct 2 20:07:04.762838 systemd[1]: Started containerd.service. Oct 2 20:07:04.772969 tar[1140]: ./host-device Oct 2 20:07:04.808734 tar[1140]: ./tuning Oct 2 20:07:04.839606 tar[1140]: ./vrf Oct 2 20:07:04.848675 locksmithd[1175]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:07:04.872255 tar[1140]: ./sbr Oct 2 20:07:04.902161 tar[1140]: ./tap Oct 2 20:07:04.936941 tar[1140]: ./dhcp Oct 2 20:07:05.022675 tar[1140]: ./static Oct 2 20:07:05.027095 systemd[1]: Finished prepare-critools.service. Oct 2 20:07:05.046650 tar[1140]: ./firewall Oct 2 20:07:05.079985 tar[1140]: ./macvlan Oct 2 20:07:05.110306 tar[1140]: ./dummy Oct 2 20:07:05.140106 tar[1140]: ./bridge Oct 2 20:07:05.172556 tar[1140]: ./ipvlan Oct 2 20:07:05.202362 tar[1140]: ./portmap Oct 2 20:07:05.230812 tar[1140]: ./host-local Oct 2 20:07:05.268771 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:07:06.123933 systemd-networkd[1059]: eth0: Gained IPv6LL Oct 2 20:07:06.977789 sshd_keygen[1149]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:07:06.997915 systemd[1]: Finished sshd-keygen.service. Oct 2 20:07:07.000282 systemd[1]: Starting issuegen.service... Oct 2 20:07:07.005725 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:07:07.005883 systemd[1]: Finished issuegen.service. Oct 2 20:07:07.007960 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:07:07.014640 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:07:07.016840 systemd[1]: Started getty@tty1.service. Oct 2 20:07:07.018848 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 20:07:07.019944 systemd[1]: Reached target getty.target. Oct 2 20:07:07.020827 systemd[1]: Reached target multi-user.target. Oct 2 20:07:07.022837 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:07:07.030336 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:07:07.030508 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:07:07.031585 systemd[1]: Startup finished in 722ms (kernel) + 6.782s (initrd) + 5.657s (userspace) = 13.163s. Oct 2 20:07:08.436282 systemd[1]: Created slice system-sshd.slice. Oct 2 20:07:08.437798 systemd[1]: Started sshd@0-10.0.0.7:22-10.0.0.1:44426.service. Oct 2 20:07:08.486306 sshd[1203]: Accepted publickey for core from 10.0.0.1 port 44426 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:08.488612 sshd[1203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:08.497628 systemd[1]: Created slice user-500.slice. Oct 2 20:07:08.499042 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:07:08.500992 systemd-logind[1133]: New session 1 of user core. Oct 2 20:07:08.508468 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:07:08.510182 systemd[1]: Starting user@500.service... Oct 2 20:07:08.513713 (systemd)[1206]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:08.579058 systemd[1206]: Queued start job for default target default.target. Oct 2 20:07:08.579588 systemd[1206]: Reached target paths.target. Oct 2 20:07:08.579610 systemd[1206]: Reached target sockets.target. Oct 2 20:07:08.579624 systemd[1206]: Reached target timers.target. Oct 2 20:07:08.579634 systemd[1206]: Reached target basic.target. Oct 2 20:07:08.579687 systemd[1206]: Reached target default.target. Oct 2 20:07:08.579712 systemd[1206]: Startup finished in 59ms. Oct 2 20:07:08.580047 systemd[1]: Started user@500.service. Oct 2 20:07:08.581033 systemd[1]: Started session-1.scope. Oct 2 20:07:08.635052 systemd[1]: Started sshd@1-10.0.0.7:22-10.0.0.1:44434.service. Oct 2 20:07:08.684619 sshd[1215]: Accepted publickey for core from 10.0.0.1 port 44434 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:08.687055 sshd[1215]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:08.692184 systemd-logind[1133]: New session 2 of user core. Oct 2 20:07:08.693109 systemd[1]: Started session-2.scope. Oct 2 20:07:08.761045 sshd[1215]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:08.765980 systemd[1]: Started sshd@2-10.0.0.7:22-10.0.0.1:44438.service. Oct 2 20:07:08.778529 systemd[1]: sshd@1-10.0.0.7:22-10.0.0.1:44434.service: Deactivated successfully. Oct 2 20:07:08.779772 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:07:08.789533 systemd-logind[1133]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:07:08.791736 systemd-logind[1133]: Removed session 2. Oct 2 20:07:08.824771 sshd[1220]: Accepted publickey for core from 10.0.0.1 port 44438 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:08.824728 sshd[1220]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:08.829830 systemd-logind[1133]: New session 3 of user core. Oct 2 20:07:08.830195 systemd[1]: Started session-3.scope. Oct 2 20:07:08.884245 sshd[1220]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:08.888190 systemd[1]: sshd@2-10.0.0.7:22-10.0.0.1:44438.service: Deactivated successfully. Oct 2 20:07:08.889131 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:07:08.890337 systemd-logind[1133]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:07:08.891547 systemd[1]: Started sshd@3-10.0.0.7:22-10.0.0.1:44454.service. Oct 2 20:07:08.892973 systemd-logind[1133]: Removed session 3. Oct 2 20:07:08.931935 sshd[1227]: Accepted publickey for core from 10.0.0.1 port 44454 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:08.933291 sshd[1227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:08.936666 systemd-logind[1133]: New session 4 of user core. Oct 2 20:07:08.937653 systemd[1]: Started session-4.scope. Oct 2 20:07:08.999757 sshd[1227]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:09.004399 systemd[1]: sshd@3-10.0.0.7:22-10.0.0.1:44454.service: Deactivated successfully. Oct 2 20:07:09.005392 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:07:09.006253 systemd-logind[1133]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:07:09.008012 systemd[1]: Started sshd@4-10.0.0.7:22-10.0.0.1:44466.service. Oct 2 20:07:09.009238 systemd-logind[1133]: Removed session 4. Oct 2 20:07:09.048264 sshd[1233]: Accepted publickey for core from 10.0.0.1 port 44466 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:09.049790 sshd[1233]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:09.053318 systemd-logind[1133]: New session 5 of user core. Oct 2 20:07:09.055355 systemd[1]: Started session-5.scope. Oct 2 20:07:09.116167 sudo[1236]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:07:09.117146 sudo[1236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:09.130641 dbus-daemon[1121]: avc: received setenforce notice (enforcing=1) Oct 2 20:07:09.133181 sudo[1236]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:09.135194 sshd[1233]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:09.138962 systemd[1]: sshd@4-10.0.0.7:22-10.0.0.1:44466.service: Deactivated successfully. Oct 2 20:07:09.139566 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:07:09.140431 systemd-logind[1133]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:07:09.142163 systemd[1]: Started sshd@5-10.0.0.7:22-10.0.0.1:44476.service. Oct 2 20:07:09.142825 systemd-logind[1133]: Removed session 5. Oct 2 20:07:09.182417 sshd[1240]: Accepted publickey for core from 10.0.0.1 port 44476 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:09.184007 sshd[1240]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:09.187186 systemd-logind[1133]: New session 6 of user core. Oct 2 20:07:09.188551 systemd[1]: Started session-6.scope. Oct 2 20:07:09.244068 sudo[1244]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:07:09.244287 sudo[1244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:09.247273 sudo[1244]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:09.252129 sudo[1243]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:07:09.252333 sudo[1243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:09.261502 systemd[1]: Stopping audit-rules.service... Oct 2 20:07:09.261000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:07:09.262964 auditctl[1247]: No rules Oct 2 20:07:09.263238 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:07:09.263391 systemd[1]: Stopped audit-rules.service. Oct 2 20:07:09.263599 kernel: kauditd_printk_skb: 129 callbacks suppressed Oct 2 20:07:09.263667 kernel: audit: type=1305 audit(1696277229.261:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:07:09.264858 systemd[1]: Starting audit-rules.service... Oct 2 20:07:09.261000 audit[1247]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc7954720 a2=420 a3=0 items=0 ppid=1 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:09.269026 kernel: audit: type=1300 audit(1696277229.261:169): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc7954720 a2=420 a3=0 items=0 ppid=1 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:09.269070 kernel: audit: type=1327 audit(1696277229.261:169): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:07:09.261000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:07:09.271329 kernel: audit: type=1131 audit(1696277229.261:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.285672 augenrules[1264]: No rules Oct 2 20:07:09.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.286334 systemd[1]: Finished audit-rules.service. Oct 2 20:07:09.289297 sudo[1243]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:09.289497 kernel: audit: type=1130 audit(1696277229.285:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.288000 audit[1243]: USER_END pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.288000 audit[1243]: CRED_DISP pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.293755 sshd[1240]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:09.297552 kernel: audit: type=1106 audit(1696277229.288:172): pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.297645 kernel: audit: type=1104 audit(1696277229.288:173): pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.297663 kernel: audit: type=1106 audit(1696277229.292:174): pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.292000 audit[1240]: USER_END pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.296884 systemd[1]: sshd@5-10.0.0.7:22-10.0.0.1:44476.service: Deactivated successfully. Oct 2 20:07:09.298333 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:07:09.292000 audit[1240]: CRED_DISP pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.300246 systemd-logind[1133]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:07:09.300851 systemd[1]: Started sshd@6-10.0.0.7:22-10.0.0.1:44478.service. Oct 2 20:07:09.302308 systemd-logind[1133]: Removed session 6. Oct 2 20:07:09.302706 kernel: audit: type=1104 audit(1696277229.292:175): pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.302735 kernel: audit: type=1131 audit(1696277229.295:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.7:22-10.0.0.1:44476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.7:22-10.0.0.1:44476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:44478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.338000 audit[1270]: USER_ACCT pid=1270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.340405 sshd[1270]: Accepted publickey for core from 10.0.0.1 port 44478 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:07:09.341000 audit[1270]: CRED_ACQ pid=1270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.341000 audit[1270]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf624710 a2=3 a3=1 items=0 ppid=1 pid=1270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:09.341000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:09.342076 sshd[1270]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:09.346524 systemd-logind[1133]: New session 7 of user core. Oct 2 20:07:09.346946 systemd[1]: Started session-7.scope. Oct 2 20:07:09.350000 audit[1270]: USER_START pid=1270 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.352000 audit[1272]: CRED_ACQ pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:09.401886 sudo[1273]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:07:09.402100 sudo[1273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:07:09.400000 audit[1273]: USER_ACCT pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.400000 audit[1273]: CRED_REFR pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.402000 audit[1273]: USER_START pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.992017 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:07:09.998776 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:07:09.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:09.999321 systemd[1]: Reached target network-online.target. Oct 2 20:07:10.000847 systemd[1]: Starting docker.service... Oct 2 20:07:10.100547 env[1292]: time="2023-10-02T20:07:10.100492327Z" level=info msg="Starting up" Oct 2 20:07:10.102488 env[1292]: time="2023-10-02T20:07:10.102461990Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:07:10.102488 env[1292]: time="2023-10-02T20:07:10.102485306Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:07:10.102559 env[1292]: time="2023-10-02T20:07:10.102509975Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:07:10.102559 env[1292]: time="2023-10-02T20:07:10.102521203Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:07:10.105107 env[1292]: time="2023-10-02T20:07:10.105073783Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:07:10.105107 env[1292]: time="2023-10-02T20:07:10.105100951Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:07:10.105190 env[1292]: time="2023-10-02T20:07:10.105120006Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:07:10.105190 env[1292]: time="2023-10-02T20:07:10.105129636Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:07:10.110489 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1023296022-merged.mount: Deactivated successfully. Oct 2 20:07:10.151297 env[1292]: time="2023-10-02T20:07:10.151238298Z" level=info msg="Loading containers: start." Oct 2 20:07:10.197000 audit[1326]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.197000 audit[1326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff2ac8910 a2=0 a3=1 items=0 ppid=1292 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.197000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:07:10.199000 audit[1328]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.199000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc60d5010 a2=0 a3=1 items=0 ppid=1292 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:07:10.201000 audit[1330]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.201000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdabe6aa0 a2=0 a3=1 items=0 ppid=1292 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:07:10.203000 audit[1332]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.203000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdd3235f0 a2=0 a3=1 items=0 ppid=1292 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.203000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:07:10.206000 audit[1334]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.206000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffa1d7a90 a2=0 a3=1 items=0 ppid=1292 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:07:10.237000 audit[1339]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.237000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffbe90270 a2=0 a3=1 items=0 ppid=1292 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:07:10.244000 audit[1341]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.244000 audit[1341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe1a0f930 a2=0 a3=1 items=0 ppid=1292 pid=1341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:07:10.246000 audit[1343]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.246000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff7736db0 a2=0 a3=1 items=0 ppid=1292 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.246000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:07:10.249000 audit[1345]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.249000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffeb80c340 a2=0 a3=1 items=0 ppid=1292 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.249000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:10.257000 audit[1349]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.257000 audit[1349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe12be690 a2=0 a3=1 items=0 ppid=1292 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:10.258000 audit[1350]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.258000 audit[1350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd23637a0 a2=0 a3=1 items=0 ppid=1292 pid=1350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.258000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:10.265457 kernel: Initializing XFRM netlink socket Oct 2 20:07:10.288668 env[1292]: time="2023-10-02T20:07:10.288633544Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:07:10.303000 audit[1358]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.303000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffeb9c63e0 a2=0 a3=1 items=0 ppid=1292 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.303000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:07:10.321000 audit[1361]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.321000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffcf2b8f90 a2=0 a3=1 items=0 ppid=1292 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.321000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:07:10.324000 audit[1364]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.324000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd43331e0 a2=0 a3=1 items=0 ppid=1292 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:07:10.326000 audit[1366]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.326000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff3e3ce30 a2=0 a3=1 items=0 ppid=1292 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:07:10.328000 audit[1368]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.328000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe8bcd4b0 a2=0 a3=1 items=0 ppid=1292 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:07:10.330000 audit[1370]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.330000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffdfbb39f0 a2=0 a3=1 items=0 ppid=1292 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:07:10.332000 audit[1372]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.332000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffddefe4b0 a2=0 a3=1 items=0 ppid=1292 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:07:10.340000 audit[1375]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.340000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffcc889de0 a2=0 a3=1 items=0 ppid=1292 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.340000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:07:10.342000 audit[1377]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.342000 audit[1377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdd3a1690 a2=0 a3=1 items=0 ppid=1292 pid=1377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.342000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:07:10.344000 audit[1379]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.344000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff77e8570 a2=0 a3=1 items=0 ppid=1292 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.344000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:07:10.346000 audit[1381]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.346000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffec9f12e0 a2=0 a3=1 items=0 ppid=1292 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.346000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:07:10.347182 systemd-networkd[1059]: docker0: Link UP Oct 2 20:07:10.354000 audit[1385]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.354000 audit[1385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffda87faf0 a2=0 a3=1 items=0 ppid=1292 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:10.355000 audit[1386]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:10.355000 audit[1386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd6c201e0 a2=0 a3=1 items=0 ppid=1292 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:10.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:07:10.356275 env[1292]: time="2023-10-02T20:07:10.356238604Z" level=info msg="Loading containers: done." Oct 2 20:07:10.380194 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck430466561-merged.mount: Deactivated successfully. Oct 2 20:07:10.383225 env[1292]: time="2023-10-02T20:07:10.383180977Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:07:10.383432 env[1292]: time="2023-10-02T20:07:10.383403940Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:07:10.383562 env[1292]: time="2023-10-02T20:07:10.383536341Z" level=info msg="Daemon has completed initialization" Oct 2 20:07:10.399002 systemd[1]: Started docker.service. Oct 2 20:07:10.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:10.407540 env[1292]: time="2023-10-02T20:07:10.407389318Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:07:10.426007 systemd[1]: Reloading. Oct 2 20:07:10.478042 /usr/lib/systemd/system-generators/torcx-generator[1434]: time="2023-10-02T20:07:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:10.478424 /usr/lib/systemd/system-generators/torcx-generator[1434]: time="2023-10-02T20:07:10Z" level=info msg="torcx already run" Oct 2 20:07:10.541769 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:10.541791 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:10.560601 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit: BPF prog-id=37 op=LOAD Oct 2 20:07:10.608000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit: BPF prog-id=38 op=LOAD Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.609000 audit: BPF prog-id=39 op=LOAD Oct 2 20:07:10.609000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:07:10.609000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit: BPF prog-id=40 op=LOAD Oct 2 20:07:10.610000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit: BPF prog-id=41 op=LOAD Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.610000 audit: BPF prog-id=42 op=LOAD Oct 2 20:07:10.610000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:07:10.610000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.611000 audit: BPF prog-id=43 op=LOAD Oct 2 20:07:10.611000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.612000 audit: BPF prog-id=44 op=LOAD Oct 2 20:07:10.612000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit: BPF prog-id=45 op=LOAD Oct 2 20:07:10.613000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit: BPF prog-id=46 op=LOAD Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.613000 audit: BPF prog-id=47 op=LOAD Oct 2 20:07:10.613000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:07:10.613000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.614000 audit: BPF prog-id=48 op=LOAD Oct 2 20:07:10.614000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit: BPF prog-id=49 op=LOAD Oct 2 20:07:10.615000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit: BPF prog-id=50 op=LOAD Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:10.615000 audit: BPF prog-id=51 op=LOAD Oct 2 20:07:10.615000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:07:10.615000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:07:10.632352 systemd[1]: Started kubelet.service. Oct 2 20:07:10.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:10.795117 kubelet[1471]: E1002 20:07:10.794967 1471 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:07:10.797141 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:10.797271 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:10.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:11.016210 env[1143]: time="2023-10-02T20:07:11.016163717Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 20:07:11.680248 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount239158217.mount: Deactivated successfully. Oct 2 20:07:16.514834 env[1143]: time="2023-10-02T20:07:16.514780939Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:16.516473 env[1143]: time="2023-10-02T20:07:16.516444966Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:16.518757 env[1143]: time="2023-10-02T20:07:16.518728196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:16.520344 env[1143]: time="2023-10-02T20:07:16.520315631Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:16.521195 env[1143]: time="2023-10-02T20:07:16.521161414Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 20:07:16.532695 env[1143]: time="2023-10-02T20:07:16.532653345Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 20:07:20.475141 env[1143]: time="2023-10-02T20:07:20.475083078Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.476641 env[1143]: time="2023-10-02T20:07:20.476613542Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.478227 env[1143]: time="2023-10-02T20:07:20.478201413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.479923 env[1143]: time="2023-10-02T20:07:20.479895725Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:20.480705 env[1143]: time="2023-10-02T20:07:20.480677805Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 20:07:20.491092 env[1143]: time="2023-10-02T20:07:20.491059053Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 20:07:20.799652 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:07:20.800677 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 20:07:20.800725 kernel: audit: type=1130 audit(1696277240.799:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.799830 systemd[1]: Stopped kubelet.service. Oct 2 20:07:20.801373 systemd[1]: Started kubelet.service. Oct 2 20:07:20.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.805221 kernel: audit: type=1131 audit(1696277240.799:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.805266 kernel: audit: type=1130 audit(1696277240.801:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.845245 kubelet[1508]: E1002 20:07:20.845120 1508 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:07:20.848068 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:20.848194 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:20.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:20.851440 kernel: audit: type=1131 audit(1696277240.848:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:23.115844 env[1143]: time="2023-10-02T20:07:23.115790788Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:23.117683 env[1143]: time="2023-10-02T20:07:23.117652618Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:23.119869 env[1143]: time="2023-10-02T20:07:23.119836752Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:23.121782 env[1143]: time="2023-10-02T20:07:23.121758561Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:23.122496 env[1143]: time="2023-10-02T20:07:23.122465876Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 20:07:23.132179 env[1143]: time="2023-10-02T20:07:23.132146103Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 20:07:24.152649 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount553959746.mount: Deactivated successfully. Oct 2 20:07:24.943613 env[1143]: time="2023-10-02T20:07:24.943563321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:24.945114 env[1143]: time="2023-10-02T20:07:24.945072111Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:24.946506 env[1143]: time="2023-10-02T20:07:24.946479599Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:24.948159 env[1143]: time="2023-10-02T20:07:24.948127913Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:24.948566 env[1143]: time="2023-10-02T20:07:24.948533035Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 20:07:24.959481 env[1143]: time="2023-10-02T20:07:24.959450858Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:07:25.385820 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1304511022.mount: Deactivated successfully. Oct 2 20:07:25.390224 env[1143]: time="2023-10-02T20:07:25.390188054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:25.391350 env[1143]: time="2023-10-02T20:07:25.391326318Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:25.392633 env[1143]: time="2023-10-02T20:07:25.392606529Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:25.393803 env[1143]: time="2023-10-02T20:07:25.393771963Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:25.394379 env[1143]: time="2023-10-02T20:07:25.394351389Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 20:07:25.405859 env[1143]: time="2023-10-02T20:07:25.405815457Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 20:07:26.157937 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount753179112.mount: Deactivated successfully. Oct 2 20:07:29.233995 env[1143]: time="2023-10-02T20:07:29.233450357Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:29.238426 env[1143]: time="2023-10-02T20:07:29.238373101Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:29.239410 env[1143]: time="2023-10-02T20:07:29.239371148Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:29.241346 env[1143]: time="2023-10-02T20:07:29.241243002Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:29.241890 env[1143]: time="2023-10-02T20:07:29.241837230Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 20:07:29.251434 env[1143]: time="2023-10-02T20:07:29.251386106Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:07:29.857307 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2464102180.mount: Deactivated successfully. Oct 2 20:07:30.503551 env[1143]: time="2023-10-02T20:07:30.503499137Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:30.504982 env[1143]: time="2023-10-02T20:07:30.504943578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:30.506458 env[1143]: time="2023-10-02T20:07:30.506423880Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:30.507943 env[1143]: time="2023-10-02T20:07:30.507922131Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:30.508370 env[1143]: time="2023-10-02T20:07:30.508348011Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:07:30.850875 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:07:30.851186 systemd[1]: Stopped kubelet.service. Oct 2 20:07:30.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.856459 kernel: audit: type=1130 audit(1696277250.850:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.856552 kernel: audit: type=1131 audit(1696277250.850:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.856571 kernel: audit: type=1130 audit(1696277250.852:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:30.852662 systemd[1]: Started kubelet.service. Oct 2 20:07:30.902670 kubelet[1566]: E1002 20:07:30.902622 1566 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:07:30.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:30.904947 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:07:30.905062 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:07:30.908442 kernel: audit: type=1131 audit(1696277250.904:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:07:35.790802 systemd[1]: Stopped kubelet.service. Oct 2 20:07:35.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:35.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:35.796318 kernel: audit: type=1130 audit(1696277255.790:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:35.796401 kernel: audit: type=1131 audit(1696277255.790:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:35.807225 systemd[1]: Reloading. Oct 2 20:07:35.851290 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2023-10-02T20:07:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:35.851318 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2023-10-02T20:07:35Z" level=info msg="torcx already run" Oct 2 20:07:35.913910 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:35.914105 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:35.931735 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982451 kernel: audit: type=1400 audit(1696277255.977:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982508 kernel: audit: type=1400 audit(1696277255.977:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982528 kernel: audit: type=1400 audit(1696277255.977:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986982 kernel: audit: type=1400 audit(1696277255.977:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.987045 kernel: audit: type=1400 audit(1696277255.977:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.991893 kernel: audit: type=1400 audit(1696277255.977:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.991938 kernel: audit: type=1400 audit(1696277255.977:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.995230 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:07:35.995306 kernel: audit: type=1400 audit(1696277255.977:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997666 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:07:35.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit: BPF prog-id=52 op=LOAD Oct 2 20:07:35.979000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit: BPF prog-id=53 op=LOAD Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.984000 audit: BPF prog-id=54 op=LOAD Oct 2 20:07:35.984000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:07:35.984000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit: BPF prog-id=55 op=LOAD Oct 2 20:07:35.986000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit: BPF prog-id=56 op=LOAD Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.991000 audit: BPF prog-id=57 op=LOAD Oct 2 20:07:35.991000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:07:35.991000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:07:35.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=58 op=LOAD Oct 2 20:07:35.998000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.998000 audit: BPF prog-id=59 op=LOAD Oct 2 20:07:35.998000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit: BPF prog-id=60 op=LOAD Oct 2 20:07:35.999000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit: BPF prog-id=61 op=LOAD Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:35.999000 audit: BPF prog-id=62 op=LOAD Oct 2 20:07:36.000000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:07:36.000000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.000000 audit: BPF prog-id=63 op=LOAD Oct 2 20:07:36.000000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit: BPF prog-id=64 op=LOAD Oct 2 20:07:36.001000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit: BPF prog-id=65 op=LOAD Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.001000 audit: BPF prog-id=66 op=LOAD Oct 2 20:07:36.001000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:07:36.001000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:07:36.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:36.015239 systemd[1]: Started kubelet.service. Oct 2 20:07:36.067057 kubelet[1684]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:36.067057 kubelet[1684]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:07:36.067057 kubelet[1684]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:36.067482 kubelet[1684]: I1002 20:07:36.067121 1684 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:07:36.477312 kubelet[1684]: I1002 20:07:36.477229 1684 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:07:36.477312 kubelet[1684]: I1002 20:07:36.477261 1684 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:07:36.477494 kubelet[1684]: I1002 20:07:36.477479 1684 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:07:36.482599 kubelet[1684]: I1002 20:07:36.482467 1684 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:36.482964 kubelet[1684]: E1002 20:07:36.482949 1684 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.7:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.484342 kubelet[1684]: W1002 20:07:36.484320 1684 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:07:36.485043 kubelet[1684]: I1002 20:07:36.485027 1684 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:07:36.485275 kubelet[1684]: I1002 20:07:36.485258 1684 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:07:36.485336 kubelet[1684]: I1002 20:07:36.485326 1684 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:07:36.485406 kubelet[1684]: I1002 20:07:36.485351 1684 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:07:36.485406 kubelet[1684]: I1002 20:07:36.485363 1684 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:07:36.485474 kubelet[1684]: I1002 20:07:36.485467 1684 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:36.488669 kubelet[1684]: I1002 20:07:36.488650 1684 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:07:36.488793 kubelet[1684]: I1002 20:07:36.488780 1684 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:07:36.488900 kubelet[1684]: I1002 20:07:36.488888 1684 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:07:36.488983 kubelet[1684]: I1002 20:07:36.488973 1684 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:07:36.489186 kubelet[1684]: W1002 20:07:36.489113 1684 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.489186 kubelet[1684]: E1002 20:07:36.489164 1684 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.489469 kubelet[1684]: W1002 20:07:36.489356 1684 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.489469 kubelet[1684]: E1002 20:07:36.489396 1684 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.7:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.489910 kubelet[1684]: I1002 20:07:36.489883 1684 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:07:36.490319 kubelet[1684]: W1002 20:07:36.490308 1684 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:07:36.490986 kubelet[1684]: I1002 20:07:36.490972 1684 server.go:1168] "Started kubelet" Oct 2 20:07:36.491144 kubelet[1684]: I1002 20:07:36.491129 1684 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:07:36.492331 kubelet[1684]: I1002 20:07:36.492314 1684 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:07:36.494518 kubelet[1684]: I1002 20:07:36.494498 1684 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:07:36.495760 kubelet[1684]: E1002 20:07:36.495679 1684 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a632d71b7aa66", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 7, 36, 490953318, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 7, 36, 490953318, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.7:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.7:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:07:36.494000 audit[1684]: AVC avc: denied { mac_admin } for pid=1684 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.494000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:36.494000 audit[1684]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c4b470 a1=4000948750 a2=4000c4b440 a3=25 items=0 ppid=1 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.494000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:36.494000 audit[1684]: AVC avc: denied { mac_admin } for pid=1684 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.494000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:36.494000 audit[1684]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400053a020 a1=4000948768 a2=4000c4b500 a3=25 items=0 ppid=1 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.494000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:36.496273 kubelet[1684]: E1002 20:07:36.495960 1684 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:07:36.496273 kubelet[1684]: E1002 20:07:36.495981 1684 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:07:36.496273 kubelet[1684]: I1002 20:07:36.496105 1684 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:07:36.496273 kubelet[1684]: I1002 20:07:36.496166 1684 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:07:36.496273 kubelet[1684]: I1002 20:07:36.496246 1684 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:07:36.496829 kubelet[1684]: I1002 20:07:36.496811 1684 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:07:36.497008 kubelet[1684]: I1002 20:07:36.496993 1684 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:07:36.497568 kubelet[1684]: W1002 20:07:36.497533 1684 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.497636 kubelet[1684]: E1002 20:07:36.497575 1684 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.7:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.497636 kubelet[1684]: E1002 20:07:36.497591 1684 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.7:6443: connect: connection refused" interval="200ms" Oct 2 20:07:36.500000 audit[1699]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.500000 audit[1699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff8528850 a2=0 a3=1 items=0 ppid=1684 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:07:36.501000 audit[1700]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.501000 audit[1700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeee9a7f0 a2=0 a3=1 items=0 ppid=1684 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:07:36.504000 audit[1702]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.504000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffed0a9f00 a2=0 a3=1 items=0 ppid=1684 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:36.506000 audit[1704]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.506000 audit[1704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedb48a80 a2=0 a3=1 items=0 ppid=1684 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:36.515131 kubelet[1684]: I1002 20:07:36.515113 1684 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:07:36.515229 kubelet[1684]: I1002 20:07:36.515218 1684 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:07:36.515288 kubelet[1684]: I1002 20:07:36.515279 1684 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:36.517305 kubelet[1684]: I1002 20:07:36.517285 1684 policy_none.go:49] "None policy: Start" Oct 2 20:07:36.515000 audit[1710]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.515000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd7d09fd0 a2=0 a3=1 items=0 ppid=1684 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:07:36.517816 kubelet[1684]: I1002 20:07:36.517799 1684 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:07:36.518043 kubelet[1684]: I1002 20:07:36.518028 1684 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:07:36.518119 kubelet[1684]: I1002 20:07:36.518110 1684 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:07:36.517000 audit[1711]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.517000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff25077c0 a2=0 a3=1 items=0 ppid=1684 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:07:36.518000 audit[1712]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:36.518000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffceccec30 a2=0 a3=1 items=0 ppid=1684 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:07:36.519783 kubelet[1684]: I1002 20:07:36.519770 1684 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:07:36.519883 kubelet[1684]: I1002 20:07:36.519871 1684 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:07:36.520081 kubelet[1684]: I1002 20:07:36.520060 1684 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:07:36.520234 kubelet[1684]: E1002 20:07:36.520222 1684 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:07:36.519000 audit[1713]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:36.519000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe89c09e0 a2=0 a3=1 items=0 ppid=1684 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.519000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:07:36.521677 kubelet[1684]: W1002 20:07:36.521658 1684 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.520000 audit[1714]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:36.520000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd21ccbc0 a2=0 a3=1 items=0 ppid=1684 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:07:36.522322 kubelet[1684]: E1002 20:07:36.522298 1684 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.7:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:36.521000 audit[1715]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.521000 audit[1715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3894a90 a2=0 a3=1 items=0 ppid=1684 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:07:36.521000 audit[1716]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:36.521000 audit[1716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff1e9d1c0 a2=0 a3=1 items=0 ppid=1684 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:07:36.524828 systemd[1]: Created slice kubepods.slice. Oct 2 20:07:36.523000 audit[1717]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:36.523000 audit[1717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef67e670 a2=0 a3=1 items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:07:36.528701 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:07:36.544515 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:07:36.545556 kubelet[1684]: I1002 20:07:36.545532 1684 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:07:36.544000 audit[1684]: AVC avc: denied { mac_admin } for pid=1684 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:36.544000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:36.544000 audit[1684]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c0baa0 a1=4000ca4de0 a2=4000c0ba70 a3=25 items=0 ppid=1 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.544000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:36.545763 kubelet[1684]: I1002 20:07:36.545622 1684 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:07:36.545801 kubelet[1684]: I1002 20:07:36.545792 1684 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:07:36.546586 kubelet[1684]: E1002 20:07:36.546563 1684 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 20:07:36.598404 kubelet[1684]: I1002 20:07:36.598381 1684 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:36.599142 kubelet[1684]: E1002 20:07:36.599127 1684 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 20:07:36.621477 kubelet[1684]: I1002 20:07:36.621442 1684 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:36.622566 kubelet[1684]: I1002 20:07:36.622547 1684 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:36.623394 kubelet[1684]: I1002 20:07:36.623370 1684 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:36.627512 systemd[1]: Created slice kubepods-burstable-pod643b881e7e8876cd7d355875522f7a3b.slice. Oct 2 20:07:36.640251 systemd[1]: Created slice kubepods-burstable-pod80b8b8966aa7d1c422f3be2bfac9c13f.slice. Oct 2 20:07:36.643770 systemd[1]: Created slice kubepods-burstable-pod24fef87020af50fba838138f9686fc61.slice. Oct 2 20:07:36.698600 kubelet[1684]: E1002 20:07:36.698570 1684 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.7:6443: connect: connection refused" interval="400ms" Oct 2 20:07:36.798926 kubelet[1684]: I1002 20:07:36.798835 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:36.799109 kubelet[1684]: I1002 20:07:36.799085 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:36.799205 kubelet[1684]: I1002 20:07:36.799196 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:36.799689 kubelet[1684]: I1002 20:07:36.799670 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:36.800738 kubelet[1684]: I1002 20:07:36.800637 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:36.801227 kubelet[1684]: I1002 20:07:36.801207 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:36.801369 kubelet[1684]: I1002 20:07:36.801355 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:36.801549 kubelet[1684]: I1002 20:07:36.801535 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:36.801733 kubelet[1684]: I1002 20:07:36.801470 1684 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:36.801853 kubelet[1684]: I1002 20:07:36.801715 1684 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:36.802106 kubelet[1684]: E1002 20:07:36.802079 1684 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 20:07:36.939374 kubelet[1684]: E1002 20:07:36.939332 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.940071 env[1143]: time="2023-10-02T20:07:36.940014990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:643b881e7e8876cd7d355875522f7a3b,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:36.942632 kubelet[1684]: E1002 20:07:36.942610 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.943003 env[1143]: time="2023-10-02T20:07:36.942971738Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:36.946297 kubelet[1684]: E1002 20:07:36.946279 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:36.946775 env[1143]: time="2023-10-02T20:07:36.946732429Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:37.099442 kubelet[1684]: E1002 20:07:37.099391 1684 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.7:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.7:6443: connect: connection refused" interval="800ms" Oct 2 20:07:37.203989 kubelet[1684]: I1002 20:07:37.203955 1684 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:37.204321 kubelet[1684]: E1002 20:07:37.204262 1684 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.7:6443/api/v1/nodes\": dial tcp 10.0.0.7:6443: connect: connection refused" node="localhost" Oct 2 20:07:37.445768 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3244264137.mount: Deactivated successfully. Oct 2 20:07:37.450269 env[1143]: time="2023-10-02T20:07:37.450226987Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.451166 env[1143]: time="2023-10-02T20:07:37.451136337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.452885 env[1143]: time="2023-10-02T20:07:37.452850167Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.453660 env[1143]: time="2023-10-02T20:07:37.453603074Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.454309 env[1143]: time="2023-10-02T20:07:37.454288951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.456309 env[1143]: time="2023-10-02T20:07:37.456284315Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.459410 env[1143]: time="2023-10-02T20:07:37.459380950Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.460187 env[1143]: time="2023-10-02T20:07:37.460154158Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.463290 env[1143]: time="2023-10-02T20:07:37.463256118Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.465364 env[1143]: time="2023-10-02T20:07:37.465334850Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.466047 env[1143]: time="2023-10-02T20:07:37.466026612Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.466815 env[1143]: time="2023-10-02T20:07:37.466791211Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:07:37.490991 env[1143]: time="2023-10-02T20:07:37.490895432Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:37.490991 env[1143]: time="2023-10-02T20:07:37.490946926Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:37.490991 env[1143]: time="2023-10-02T20:07:37.490957777Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:37.491214 env[1143]: time="2023-10-02T20:07:37.491156705Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:37.491214 env[1143]: time="2023-10-02T20:07:37.491193263Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:37.491316 env[1143]: time="2023-10-02T20:07:37.491214646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f5cba8de6df319f0080803bc8d5e449eb9723815c787bc176fef1016dc603345 pid=1739 runtime=io.containerd.runc.v2 Oct 2 20:07:37.491316 env[1143]: time="2023-10-02T20:07:37.491211642Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:37.491445 env[1143]: time="2023-10-02T20:07:37.491394273Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:37.491445 env[1143]: time="2023-10-02T20:07:37.491433474Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:37.491515 env[1143]: time="2023-10-02T20:07:37.491443725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:37.491637 env[1143]: time="2023-10-02T20:07:37.491584872Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/75607991938bac0e21bc8a1ceab57110a2e85bba1a5b4cedcea5900d20d0393e pid=1740 runtime=io.containerd.runc.v2 Oct 2 20:07:37.492123 env[1143]: time="2023-10-02T20:07:37.491817996Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/30e1e89dc57f7f23814b231b349cebe8860953daa1765c6d5e6a9e9249ab4010 pid=1741 runtime=io.containerd.runc.v2 Oct 2 20:07:37.508586 systemd[1]: Started cri-containerd-30e1e89dc57f7f23814b231b349cebe8860953daa1765c6d5e6a9e9249ab4010.scope. Oct 2 20:07:37.511776 systemd[1]: Started cri-containerd-75607991938bac0e21bc8a1ceab57110a2e85bba1a5b4cedcea5900d20d0393e.scope. Oct 2 20:07:37.518527 systemd[1]: Started cri-containerd-f5cba8de6df319f0080803bc8d5e449eb9723815c787bc176fef1016dc603345.scope. Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit: BPF prog-id=67 op=LOAD Oct 2 20:07:37.537000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.537000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1741 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653165383964633537663766323338313462323331623334396365 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1741 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653165383964633537663766323338313462323331623334396365 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit: BPF prog-id=68 op=LOAD Oct 2 20:07:37.538000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1741 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653165383964633537663766323338313462323331623334396365 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.538000 audit: BPF prog-id=69 op=LOAD Oct 2 20:07:37.538000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1741 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653165383964633537663766323338313462323331623334396365 Oct 2 20:07:37.539000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:07:37.539000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { perfmon } for pid=1772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit[1772]: AVC avc: denied { bpf } for pid=1772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.539000 audit: BPF prog-id=70 op=LOAD Oct 2 20:07:37.539000 audit[1772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1741 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330653165383964633537663766323338313462323331623334396365 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.554000 audit: BPF prog-id=71 op=LOAD Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1740 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363037393931393338626163306532316263386131636561623537 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1740 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363037393931393338626163306532316263386131636561623537 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit: BPF prog-id=72 op=LOAD Oct 2 20:07:37.555000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1740 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363037393931393338626163306532316263386131636561623537 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit: BPF prog-id=73 op=LOAD Oct 2 20:07:37.555000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1740 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363037393931393338626163306532316263386131636561623537 Oct 2 20:07:37.555000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:07:37.555000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.555000 audit: BPF prog-id=74 op=LOAD Oct 2 20:07:37.555000 audit[1771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1740 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363037393931393338626163306532316263386131636561623537 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit: BPF prog-id=75 op=LOAD Oct 2 20:07:37.558000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.558000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1739 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635636261386465366466333139663030383038303362633864356534 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1739 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635636261386465366466333139663030383038303362633864356534 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit: BPF prog-id=76 op=LOAD Oct 2 20:07:37.559000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1739 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635636261386465366466333139663030383038303362633864356534 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit: BPF prog-id=77 op=LOAD Oct 2 20:07:37.559000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1739 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635636261386465366466333139663030383038303362633864356534 Oct 2 20:07:37.559000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:07:37.559000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.559000 audit: BPF prog-id=78 op=LOAD Oct 2 20:07:37.559000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1739 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635636261386465366466333139663030383038303362633864356534 Oct 2 20:07:37.574241 env[1143]: time="2023-10-02T20:07:37.574201179Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:643b881e7e8876cd7d355875522f7a3b,Namespace:kube-system,Attempt:0,} returns sandbox id \"30e1e89dc57f7f23814b231b349cebe8860953daa1765c6d5e6a9e9249ab4010\"" Oct 2 20:07:37.575284 kubelet[1684]: E1002 20:07:37.575264 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:37.577854 env[1143]: time="2023-10-02T20:07:37.577815955Z" level=info msg="CreateContainer within sandbox \"30e1e89dc57f7f23814b231b349cebe8860953daa1765c6d5e6a9e9249ab4010\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:07:37.592783 env[1143]: time="2023-10-02T20:07:37.592736742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:24fef87020af50fba838138f9686fc61,Namespace:kube-system,Attempt:0,} returns sandbox id \"75607991938bac0e21bc8a1ceab57110a2e85bba1a5b4cedcea5900d20d0393e\"" Oct 2 20:07:37.593409 kubelet[1684]: E1002 20:07:37.593391 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:37.593721 env[1143]: time="2023-10-02T20:07:37.593685253Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:80b8b8966aa7d1c422f3be2bfac9c13f,Namespace:kube-system,Attempt:0,} returns sandbox id \"f5cba8de6df319f0080803bc8d5e449eb9723815c787bc176fef1016dc603345\"" Oct 2 20:07:37.594336 kubelet[1684]: E1002 20:07:37.594319 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:37.595632 env[1143]: time="2023-10-02T20:07:37.595405530Z" level=info msg="CreateContainer within sandbox \"75607991938bac0e21bc8a1ceab57110a2e85bba1a5b4cedcea5900d20d0393e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:07:37.596692 env[1143]: time="2023-10-02T20:07:37.596659961Z" level=info msg="CreateContainer within sandbox \"f5cba8de6df319f0080803bc8d5e449eb9723815c787bc176fef1016dc603345\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:07:37.596891 env[1143]: time="2023-10-02T20:07:37.596713176Z" level=info msg="CreateContainer within sandbox \"30e1e89dc57f7f23814b231b349cebe8860953daa1765c6d5e6a9e9249ab4010\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"23e10770f344b249429bf36da7875dfba7c7fd34f0fb765ff564a4bd14c032be\"" Oct 2 20:07:37.597644 env[1143]: time="2023-10-02T20:07:37.597604788Z" level=info msg="StartContainer for \"23e10770f344b249429bf36da7875dfba7c7fd34f0fb765ff564a4bd14c032be\"" Oct 2 20:07:37.607804 env[1143]: time="2023-10-02T20:07:37.607733729Z" level=info msg="CreateContainer within sandbox \"75607991938bac0e21bc8a1ceab57110a2e85bba1a5b4cedcea5900d20d0393e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2adfdd228ee1a27349f271f28c8350121d5caefcf0642fd88dfa1f4c48c25598\"" Oct 2 20:07:37.608369 env[1143]: time="2023-10-02T20:07:37.608332355Z" level=info msg="StartContainer for \"2adfdd228ee1a27349f271f28c8350121d5caefcf0642fd88dfa1f4c48c25598\"" Oct 2 20:07:37.610608 env[1143]: time="2023-10-02T20:07:37.610568050Z" level=info msg="CreateContainer within sandbox \"f5cba8de6df319f0080803bc8d5e449eb9723815c787bc176fef1016dc603345\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"d4f2f8fb0cc76d8fc344b4390ee4ae9c731f341e634d2fc5e51255932ac52454\"" Oct 2 20:07:37.611116 env[1143]: time="2023-10-02T20:07:37.611068933Z" level=info msg="StartContainer for \"d4f2f8fb0cc76d8fc344b4390ee4ae9c731f341e634d2fc5e51255932ac52454\"" Oct 2 20:07:37.622555 systemd[1]: Started cri-containerd-23e10770f344b249429bf36da7875dfba7c7fd34f0fb765ff564a4bd14c032be.scope. Oct 2 20:07:37.641637 systemd[1]: Started cri-containerd-2adfdd228ee1a27349f271f28c8350121d5caefcf0642fd88dfa1f4c48c25598.scope. Oct 2 20:07:37.642408 systemd[1]: Started cri-containerd-d4f2f8fb0cc76d8fc344b4390ee4ae9c731f341e634d2fc5e51255932ac52454.scope. Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.663000 audit: BPF prog-id=79 op=LOAD Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=1741 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233653130373730663334346232343934323962663336646137383735 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=1741 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233653130373730663334346232343934323962663336646137383735 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit: BPF prog-id=80 op=LOAD Oct 2 20:07:37.664000 audit[1858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=1741 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233653130373730663334346232343934323962663336646137383735 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit: BPF prog-id=81 op=LOAD Oct 2 20:07:37.664000 audit[1858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=1741 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233653130373730663334346232343934323962663336646137383735 Oct 2 20:07:37.664000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:07:37.664000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.664000 audit: BPF prog-id=82 op=LOAD Oct 2 20:07:37.664000 audit[1858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=1741 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233653130373730663334346232343934323962663336646137383735 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit: BPF prog-id=83 op=LOAD Oct 2 20:07:37.669000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.669000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1740 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646664643232386565316132373334396632373166323863383335 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1740 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646664643232386565316132373334396632373166323863383335 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.670000 audit: BPF prog-id=84 op=LOAD Oct 2 20:07:37.670000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1740 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646664643232386565316132373334396632373166323863383335 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit: BPF prog-id=85 op=LOAD Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.671000 audit: BPF prog-id=86 op=LOAD Oct 2 20:07:37.671000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1740 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646664643232386565316132373334396632373166323863383335 Oct 2 20:07:37.672000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:07:37.672000 audit[1885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1739 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434663266386662306363373664386663333434623433393065653461 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1739 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434663266386662306363373664386663333434623433393065653461 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit: BPF prog-id=87 op=LOAD Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1739 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434663266386662306363373664386663333434623433393065653461 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit: BPF prog-id=88 op=LOAD Oct 2 20:07:37.672000 audit[1885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1739 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434663266386662306363373664386663333434623433393065653461 Oct 2 20:07:37.672000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:07:37.672000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { bpf } for pid=1885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1885]: AVC avc: denied { perfmon } for pid=1885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:37.672000 audit[1883]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1740 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646664643232386565316132373334396632373166323863383335 Oct 2 20:07:37.672000 audit[1885]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1739 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:37.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434663266386662306363373664386663333434623433393065653461 Oct 2 20:07:37.699376 env[1143]: time="2023-10-02T20:07:37.698649426Z" level=info msg="StartContainer for \"23e10770f344b249429bf36da7875dfba7c7fd34f0fb765ff564a4bd14c032be\" returns successfully" Oct 2 20:07:37.741105 env[1143]: time="2023-10-02T20:07:37.739581106Z" level=info msg="StartContainer for \"d4f2f8fb0cc76d8fc344b4390ee4ae9c731f341e634d2fc5e51255932ac52454\" returns successfully" Oct 2 20:07:37.741105 env[1143]: time="2023-10-02T20:07:37.739721773Z" level=info msg="StartContainer for \"2adfdd228ee1a27349f271f28c8350121d5caefcf0642fd88dfa1f4c48c25598\" returns successfully" Oct 2 20:07:37.820869 kubelet[1684]: W1002 20:07:37.820302 1684 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:37.820869 kubelet[1684]: E1002 20:07:37.820366 1684 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.7:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.7:6443: connect: connection refused Oct 2 20:07:38.005596 kubelet[1684]: I1002 20:07:38.005492 1684 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:38.536068 kubelet[1684]: E1002 20:07:38.536034 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:38.538366 kubelet[1684]: E1002 20:07:38.538329 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:38.540443 kubelet[1684]: E1002 20:07:38.540387 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:39.237000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.237000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400bc88460 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.237000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.237000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40040ba090 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.237000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.237000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=4004108000 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.244000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.244000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40068c1740 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.244000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.244000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40040e39b0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.248000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.248000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5b a1=40041be4e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:07:39.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:07:39.397100 kubelet[1684]: E1002 20:07:39.397059 1684 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 20:07:39.454403 kubelet[1684]: I1002 20:07:39.454343 1684 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 20:07:39.468407 kubelet[1684]: E1002 20:07:39.468372 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:39.542364 kubelet[1684]: E1002 20:07:39.542265 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:39.568795 kubelet[1684]: E1002 20:07:39.568748 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:39.615000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.615000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40000b5580 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:39.615000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:39.614000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:39.614000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ac4000 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:39.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:39.669521 kubelet[1684]: E1002 20:07:39.669486 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:39.770153 kubelet[1684]: E1002 20:07:39.770093 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:39.870698 kubelet[1684]: E1002 20:07:39.870657 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:39.971282 kubelet[1684]: E1002 20:07:39.971243 1684 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 20:07:40.491839 kubelet[1684]: I1002 20:07:40.491792 1684 apiserver.go:52] "Watching apiserver" Oct 2 20:07:40.497782 kubelet[1684]: I1002 20:07:40.497733 1684 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:07:40.522653 kubelet[1684]: I1002 20:07:40.522609 1684 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:07:41.445473 kubelet[1684]: E1002 20:07:41.445445 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.543826 kubelet[1684]: E1002 20:07:41.543801 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:41.818998 kubelet[1684]: E1002 20:07:41.818956 1684 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.104274 systemd[1]: Reloading. Oct 2 20:07:42.153194 /usr/lib/systemd/system-generators/torcx-generator[1988]: time="2023-10-02T20:07:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:07:42.153285 /usr/lib/systemd/system-generators/torcx-generator[1988]: time="2023-10-02T20:07:42Z" level=info msg="torcx already run" Oct 2 20:07:42.217041 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:07:42.217061 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:07:42.236289 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.297683 kernel: kauditd_printk_skb: 593 callbacks suppressed Oct 2 20:07:42.297760 kernel: audit: type=1400 audit(1696277262.293:699): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.297790 kernel: audit: type=1400 audit(1696277262.293:700): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.302277 kernel: audit: type=1400 audit(1696277262.293:701): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.302319 kernel: audit: type=1400 audit(1696277262.293:702): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.307088 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:07:42.307147 kernel: audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:07:42.307172 kernel: audit: backlog limit exceeded Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.308440 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:07:42.308486 kernel: audit: type=1400 audit(1696277262.293:703): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.308511 kernel: audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.293000 audit: BPF prog-id=91 op=LOAD Oct 2 20:07:42.293000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit: BPF prog-id=92 op=LOAD Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.298000 audit: BPF prog-id=93 op=LOAD Oct 2 20:07:42.298000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:07:42.298000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit: BPF prog-id=94 op=LOAD Oct 2 20:07:42.300000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit: BPF prog-id=95 op=LOAD Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.303000 audit: BPF prog-id=96 op=LOAD Oct 2 20:07:42.303000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:07:42.303000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:07:42.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.310000 audit: BPF prog-id=99 op=LOAD Oct 2 20:07:42.310000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit: BPF prog-id=100 op=LOAD Oct 2 20:07:42.311000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit: BPF prog-id=101 op=LOAD Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.311000 audit: BPF prog-id=102 op=LOAD Oct 2 20:07:42.311000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:07:42.311000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.312000 audit: BPF prog-id=103 op=LOAD Oct 2 20:07:42.312000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit: BPF prog-id=104 op=LOAD Oct 2 20:07:42.313000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.313000 audit: BPF prog-id=105 op=LOAD Oct 2 20:07:42.313000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit: BPF prog-id=106 op=LOAD Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit: BPF prog-id=107 op=LOAD Oct 2 20:07:42.314000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:07:42.314000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.314000 audit: BPF prog-id=108 op=LOAD Oct 2 20:07:42.314000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.315000 audit: BPF prog-id=109 op=LOAD Oct 2 20:07:42.315000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.316000 audit: BPF prog-id=110 op=LOAD Oct 2 20:07:42.316000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.317000 audit: BPF prog-id=111 op=LOAD Oct 2 20:07:42.317000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:07:42.328682 kubelet[1684]: I1002 20:07:42.328654 1684 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:42.328931 systemd[1]: Stopping kubelet.service... Oct 2 20:07:42.353765 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:07:42.353966 systemd[1]: Stopped kubelet.service. Oct 2 20:07:42.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.355650 systemd[1]: Started kubelet.service. Oct 2 20:07:42.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.420827 kubelet[2026]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:42.421163 kubelet[2026]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:07:42.421237 kubelet[2026]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:07:42.421467 kubelet[2026]: I1002 20:07:42.421395 2026 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:07:42.426118 kubelet[2026]: I1002 20:07:42.426087 2026 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:07:42.426118 kubelet[2026]: I1002 20:07:42.426113 2026 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:07:42.426312 kubelet[2026]: I1002 20:07:42.426296 2026 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:07:42.427815 kubelet[2026]: I1002 20:07:42.427794 2026 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:07:42.428867 kubelet[2026]: I1002 20:07:42.428845 2026 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:07:42.430474 kubelet[2026]: W1002 20:07:42.430449 2026 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 20:07:42.431173 kubelet[2026]: I1002 20:07:42.431144 2026 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:07:42.431361 kubelet[2026]: I1002 20:07:42.431343 2026 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:07:42.431432 kubelet[2026]: I1002 20:07:42.431410 2026 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:07:42.431517 kubelet[2026]: I1002 20:07:42.431449 2026 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:07:42.431517 kubelet[2026]: I1002 20:07:42.431460 2026 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:07:42.431517 kubelet[2026]: I1002 20:07:42.431482 2026 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:42.434257 kubelet[2026]: I1002 20:07:42.434236 2026 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:07:42.434257 kubelet[2026]: I1002 20:07:42.434259 2026 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:07:42.434331 kubelet[2026]: I1002 20:07:42.434285 2026 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:07:42.434331 kubelet[2026]: I1002 20:07:42.434305 2026 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:07:42.434819 kubelet[2026]: I1002 20:07:42.434721 2026 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:07:42.435180 kubelet[2026]: I1002 20:07:42.435146 2026 server.go:1168] "Started kubelet" Oct 2 20:07:42.436603 kubelet[2026]: E1002 20:07:42.436583 2026 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:07:42.436000 audit[2026]: AVC avc: denied { mac_admin } for pid=2026 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.436000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:42.436000 audit[2026]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400086f380 a1=40008d67c8 a2=400086f350 a3=25 items=0 ppid=1 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.436000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:42.436892 kubelet[2026]: E1002 20:07:42.436879 2026 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:07:42.436965 kubelet[2026]: I1002 20:07:42.436661 2026 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:07:42.436000 audit[2026]: AVC avc: denied { mac_admin } for pid=2026 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.436000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:42.436000 audit[2026]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400077b360 a1=4000217320 a2=4000761c50 a3=25 items=0 ppid=1 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.436000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:42.437181 kubelet[2026]: I1002 20:07:42.436703 2026 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:07:42.437252 kubelet[2026]: I1002 20:07:42.437237 2026 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:07:42.437316 kubelet[2026]: I1002 20:07:42.437307 2026 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:07:42.437711 kubelet[2026]: I1002 20:07:42.437689 2026 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:07:42.438490 kubelet[2026]: I1002 20:07:42.436747 2026 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:07:42.450994 kubelet[2026]: I1002 20:07:42.443003 2026 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:07:42.450994 kubelet[2026]: I1002 20:07:42.443889 2026 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:07:42.478654 kubelet[2026]: I1002 20:07:42.478627 2026 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:07:42.483183 kubelet[2026]: I1002 20:07:42.483155 2026 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:07:42.483225 kubelet[2026]: I1002 20:07:42.483196 2026 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:07:42.483225 kubelet[2026]: I1002 20:07:42.483213 2026 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:07:42.483294 kubelet[2026]: E1002 20:07:42.483275 2026 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:07:42.490000 audit[2053]: USER_ACCT pid=2053 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.492028 sudo[2053]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:07:42.491000 audit[2053]: CRED_REFR pid=2053 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.492261 sudo[2053]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:07:42.498000 audit[2053]: USER_START pid=2053 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.508668 kubelet[2026]: I1002 20:07:42.508641 2026 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:07:42.508668 kubelet[2026]: I1002 20:07:42.508670 2026 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:07:42.508769 kubelet[2026]: I1002 20:07:42.508688 2026 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:07:42.508861 kubelet[2026]: I1002 20:07:42.508822 2026 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:07:42.508861 kubelet[2026]: I1002 20:07:42.508840 2026 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:07:42.508861 kubelet[2026]: I1002 20:07:42.508847 2026 policy_none.go:49] "None policy: Start" Oct 2 20:07:42.509449 kubelet[2026]: I1002 20:07:42.509404 2026 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:07:42.509507 kubelet[2026]: I1002 20:07:42.509464 2026 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:07:42.509688 kubelet[2026]: I1002 20:07:42.509670 2026 state_mem.go:75] "Updated machine memory state" Oct 2 20:07:42.515167 kubelet[2026]: I1002 20:07:42.515145 2026 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:07:42.515000 audit[2026]: AVC avc: denied { mac_admin } for pid=2026 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:42.515000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:07:42.515000 audit[2026]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400086e3f0 a1=4000e244b0 a2=400086e3c0 a3=25 items=0 ppid=1 pid=2026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.515000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:07:42.515793 kubelet[2026]: I1002 20:07:42.515608 2026 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:07:42.516357 kubelet[2026]: I1002 20:07:42.516335 2026 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:07:42.547121 kubelet[2026]: I1002 20:07:42.547088 2026 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 20:07:42.555327 kubelet[2026]: I1002 20:07:42.555288 2026 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 20:07:42.555439 kubelet[2026]: I1002 20:07:42.555377 2026 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 20:07:42.584471 kubelet[2026]: I1002 20:07:42.584434 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:42.584711 kubelet[2026]: I1002 20:07:42.584695 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:42.584813 kubelet[2026]: I1002 20:07:42.584800 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:42.590770 kubelet[2026]: E1002 20:07:42.590740 2026 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:42.590921 kubelet[2026]: E1002 20:07:42.590901 2026 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:42.746107 kubelet[2026]: I1002 20:07:42.745987 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/24fef87020af50fba838138f9686fc61-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"24fef87020af50fba838138f9686fc61\") " pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:42.746107 kubelet[2026]: I1002 20:07:42.746044 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:42.746107 kubelet[2026]: I1002 20:07:42.746069 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:42.746107 kubelet[2026]: I1002 20:07:42.746099 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:42.746295 kubelet[2026]: I1002 20:07:42.746127 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:42.746295 kubelet[2026]: I1002 20:07:42.746148 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:42.746295 kubelet[2026]: I1002 20:07:42.746178 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/643b881e7e8876cd7d355875522f7a3b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"643b881e7e8876cd7d355875522f7a3b\") " pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:42.746295 kubelet[2026]: I1002 20:07:42.746196 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:42.746295 kubelet[2026]: I1002 20:07:42.746215 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/80b8b8966aa7d1c422f3be2bfac9c13f-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"80b8b8966aa7d1c422f3be2bfac9c13f\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:42.892756 kubelet[2026]: E1002 20:07:42.892728 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.892938 kubelet[2026]: E1002 20:07:42.892776 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.893196 kubelet[2026]: E1002 20:07:42.893180 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:42.963800 sudo[2053]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:42.962000 audit[2053]: USER_END pid=2053 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.962000 audit[2053]: CRED_DISP pid=2053 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:43.435590 kubelet[2026]: I1002 20:07:43.435551 2026 apiserver.go:52] "Watching apiserver" Oct 2 20:07:43.444300 kubelet[2026]: I1002 20:07:43.444261 2026 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:07:43.450414 kubelet[2026]: I1002 20:07:43.450385 2026 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:07:43.512411 kubelet[2026]: E1002 20:07:43.512377 2026 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 20:07:43.512649 kubelet[2026]: E1002 20:07:43.512376 2026 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 20:07:43.512807 kubelet[2026]: E1002 20:07:43.512386 2026 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 20:07:43.513090 kubelet[2026]: E1002 20:07:43.513072 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.513226 kubelet[2026]: E1002 20:07:43.513193 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.513378 kubelet[2026]: E1002 20:07:43.513363 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:43.525450 kubelet[2026]: I1002 20:07:43.524482 2026 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.524434164 podCreationTimestamp="2023-10-02 20:07:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:43.524317677 +0000 UTC m=+1.162217994" watchObservedRunningTime="2023-10-02 20:07:43.524434164 +0000 UTC m=+1.162334521" Oct 2 20:07:43.525450 kubelet[2026]: I1002 20:07:43.524589 2026 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.524573988 podCreationTimestamp="2023-10-02 20:07:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:43.515627587 +0000 UTC m=+1.153527904" watchObservedRunningTime="2023-10-02 20:07:43.524573988 +0000 UTC m=+1.162474305" Oct 2 20:07:43.531373 kubelet[2026]: I1002 20:07:43.531342 2026 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.5313105390000001 podCreationTimestamp="2023-10-02 20:07:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:43.53067018 +0000 UTC m=+1.168570497" watchObservedRunningTime="2023-10-02 20:07:43.531310539 +0000 UTC m=+1.169210816" Oct 2 20:07:44.435779 sudo[1273]: pam_unix(sudo:session): session closed for user root Oct 2 20:07:44.434000 audit[1273]: USER_END pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:44.434000 audit[1273]: CRED_DISP pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:07:44.437759 sshd[1270]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:44.437000 audit[1270]: USER_END pid=1270 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:44.437000 audit[1270]: CRED_DISP pid=1270 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:07:44.440318 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:07:44.440565 systemd[1]: session-7.scope: Consumed 7.317s CPU time. Oct 2 20:07:44.440988 systemd-logind[1133]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:07:44.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.7:22-10.0.0.1:44478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:44.441081 systemd[1]: sshd@6-10.0.0.7:22-10.0.0.1:44478.service: Deactivated successfully. Oct 2 20:07:44.442052 systemd-logind[1133]: Removed session 7. Oct 2 20:07:44.497432 kubelet[2026]: E1002 20:07:44.497389 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:44.497724 kubelet[2026]: E1002 20:07:44.497592 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:44.498017 kubelet[2026]: E1002 20:07:44.497994 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:45.498954 kubelet[2026]: E1002 20:07:45.498921 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:46.270104 kubelet[2026]: E1002 20:07:46.270073 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:46.500506 kubelet[2026]: E1002 20:07:46.500475 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:49.874388 update_engine[1135]: I1002 20:07:49.874030 1135 update_attempter.cc:505] Updating boot flags... Oct 2 20:07:52.848409 kernel: kauditd_printk_skb: 302 callbacks suppressed Oct 2 20:07:52.848618 kernel: audit: type=1400 audit(1696277272.846:936): avc: denied { watch } for pid=1919 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:07:52.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32572 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:07:52.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400079b6c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:52.857084 kernel: audit: type=1300 audit(1696277272.846:936): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400079b6c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:52.857183 kernel: audit: type=1327 audit(1696277272.846:936): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:52.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:52.923832 kubelet[2026]: E1002 20:07:52.923803 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:54.843000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.844000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.850090 kernel: audit: type=1400 audit(1696277274.843:937): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.850165 kernel: audit: type=1400 audit(1696277274.844:938): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.850198 kernel: audit: type=1300 audit(1696277274.844:938): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000f1f260 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.844000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000f1f260 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.844000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.857018 kernel: audit: type=1327 audit(1696277274.844:938): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.857089 kernel: audit: type=1400 audit(1696277274.845:939): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.845000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.845000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f1f4e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.863631 kernel: audit: type=1300 audit(1696277274.845:939): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f1f4e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.863688 kernel: audit: type=1327 audit(1696277274.845:939): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.845000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.843000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400123d740 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.843000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400034bf00 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:07:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:54.912725 kubelet[2026]: E1002 20:07:54.912673 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:55.516575 kubelet[2026]: E1002 20:07:55.516547 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.279033 kubelet[2026]: E1002 20:07:56.279005 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:56.905799 kubelet[2026]: I1002 20:07:56.905770 2026 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:07:56.906370 env[1143]: time="2023-10-02T20:07:56.906324081Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:07:56.906853 kubelet[2026]: I1002 20:07:56.906832 2026 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:07:57.721401 kubelet[2026]: I1002 20:07:57.720985 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:57.725916 systemd[1]: Created slice kubepods-besteffort-pod3ac4815c_79c2_4020_938b_b789617ffcac.slice. Oct 2 20:07:57.735653 kubelet[2026]: I1002 20:07:57.735615 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:57.738195 kubelet[2026]: W1002 20:07:57.738086 2026 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.738753 kubelet[2026]: E1002 20:07:57.738726 2026 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.738867 kubelet[2026]: W1002 20:07:57.738089 2026 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.738937 kubelet[2026]: E1002 20:07:57.738927 2026 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.739003 kubelet[2026]: W1002 20:07:57.738651 2026 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.739854 kubelet[2026]: E1002 20:07:57.739830 2026 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Oct 2 20:07:57.745983 systemd[1]: Created slice kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice. Oct 2 20:07:57.756028 kubelet[2026]: I1002 20:07:57.755964 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kv4k7\" (UniqueName: \"kubernetes.io/projected/3ac4815c-79c2-4020-938b-b789617ffcac-kube-api-access-kv4k7\") pod \"kube-proxy-vwl75\" (UID: \"3ac4815c-79c2-4020-938b-b789617ffcac\") " pod="kube-system/kube-proxy-vwl75" Oct 2 20:07:57.756193 kubelet[2026]: I1002 20:07:57.756180 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-hostproc\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756285 kubelet[2026]: I1002 20:07:57.756276 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-config-path\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756365 kubelet[2026]: I1002 20:07:57.756356 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756452 kubelet[2026]: I1002 20:07:57.756442 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/3ac4815c-79c2-4020-938b-b789617ffcac-kube-proxy\") pod \"kube-proxy-vwl75\" (UID: \"3ac4815c-79c2-4020-938b-b789617ffcac\") " pod="kube-system/kube-proxy-vwl75" Oct 2 20:07:57.756646 kubelet[2026]: I1002 20:07:57.756614 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-cgroup\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756693 kubelet[2026]: I1002 20:07:57.756665 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-lib-modules\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756693 kubelet[2026]: I1002 20:07:57.756688 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-xtables-lock\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756746 kubelet[2026]: I1002 20:07:57.756712 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3ac4815c-79c2-4020-938b-b789617ffcac-lib-modules\") pod \"kube-proxy-vwl75\" (UID: \"3ac4815c-79c2-4020-938b-b789617ffcac\") " pod="kube-system/kube-proxy-vwl75" Oct 2 20:07:57.756746 kubelet[2026]: I1002 20:07:57.756743 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-etc-cni-netd\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756797 kubelet[2026]: I1002 20:07:57.756774 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-bpf-maps\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756821 kubelet[2026]: I1002 20:07:57.756796 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-kernel\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756821 kubelet[2026]: I1002 20:07:57.756816 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gp9nj\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-kube-api-access-gp9nj\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756918 kubelet[2026]: I1002 20:07:57.756855 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-run\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756918 kubelet[2026]: I1002 20:07:57.756877 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-net\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756918 kubelet[2026]: I1002 20:07:57.756904 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3ac4815c-79c2-4020-938b-b789617ffcac-xtables-lock\") pod \"kube-proxy-vwl75\" (UID: \"3ac4815c-79c2-4020-938b-b789617ffcac\") " pod="kube-system/kube-proxy-vwl75" Oct 2 20:07:57.756990 kubelet[2026]: I1002 20:07:57.756927 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cni-path\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.756990 kubelet[2026]: I1002 20:07:57.756949 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets\") pod \"cilium-6gcxl\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " pod="kube-system/cilium-6gcxl" Oct 2 20:07:57.857155 kubelet[2026]: I1002 20:07:57.856965 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:07:57.863189 systemd[1]: Created slice kubepods-besteffort-podc731b288_564f_493a_a6a8_a7178d354df5.slice. Oct 2 20:07:57.958495 kubelet[2026]: I1002 20:07:57.958458 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c731b288-564f-493a-a6a8-a7178d354df5-cilium-config-path\") pod \"cilium-operator-574c4bb98d-nlzh2\" (UID: \"c731b288-564f-493a-a6a8-a7178d354df5\") " pod="kube-system/cilium-operator-574c4bb98d-nlzh2" Oct 2 20:07:57.958723 kubelet[2026]: I1002 20:07:57.958708 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wtdrn\" (UniqueName: \"kubernetes.io/projected/c731b288-564f-493a-a6a8-a7178d354df5-kube-api-access-wtdrn\") pod \"cilium-operator-574c4bb98d-nlzh2\" (UID: \"c731b288-564f-493a-a6a8-a7178d354df5\") " pod="kube-system/cilium-operator-574c4bb98d-nlzh2" Oct 2 20:07:58.043024 kubelet[2026]: E1002 20:07:58.041825 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:58.044030 env[1143]: time="2023-10-02T20:07:58.043456954Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vwl75,Uid:3ac4815c-79c2-4020-938b-b789617ffcac,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:58.074066 env[1143]: time="2023-10-02T20:07:58.073680706Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:58.074066 env[1143]: time="2023-10-02T20:07:58.073735286Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:58.074066 env[1143]: time="2023-10-02T20:07:58.073746130Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:58.074066 env[1143]: time="2023-10-02T20:07:58.073942279Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64dc26a80e3ad692ccc3bc082ea23044f62d4174670da71ed87024ba8678231b pid=2127 runtime=io.containerd.runc.v2 Oct 2 20:07:58.094002 systemd[1]: Started cri-containerd-64dc26a80e3ad692ccc3bc082ea23044f62d4174670da71ed87024ba8678231b.scope. Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.118823 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 20:07:58.118875 kernel: audit: type=1400 audit(1696277278.116:941): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.125198 kernel: audit: type=1400 audit(1696277278.116:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.125330 kernel: audit: type=1400 audit(1696277278.116:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.127784 kernel: audit: type=1400 audit(1696277278.116:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.132794 kernel: audit: type=1400 audit(1696277278.116:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.132876 kernel: audit: type=1400 audit(1696277278.116:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.135269 kernel: audit: type=1400 audit(1696277278.116:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.137668 kernel: audit: type=1400 audit(1696277278.116:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.140463 kernel: audit: type=1400 audit(1696277278.116:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.145827 kernel: audit: type=1400 audit(1696277278.117:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.117000 audit: BPF prog-id=112 op=LOAD Oct 2 20:07:58.128000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.128000 audit[2139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2127 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646332366138306533616436393263636333626330383265613233 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2127 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646332366138306533616436393263636333626330383265613233 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.130000 audit: BPF prog-id=113 op=LOAD Oct 2 20:07:58.130000 audit[2139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2127 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646332366138306533616436393263636333626330383265613233 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.131000 audit: BPF prog-id=114 op=LOAD Oct 2 20:07:58.131000 audit[2139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2127 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646332366138306533616436393263636333626330383265613233 Oct 2 20:07:58.133000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:07:58.134000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.134000 audit: BPF prog-id=115 op=LOAD Oct 2 20:07:58.134000 audit[2139]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2127 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646332366138306533616436393263636333626330383265613233 Oct 2 20:07:58.169476 env[1143]: time="2023-10-02T20:07:58.169374672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vwl75,Uid:3ac4815c-79c2-4020-938b-b789617ffcac,Namespace:kube-system,Attempt:0,} returns sandbox id \"64dc26a80e3ad692ccc3bc082ea23044f62d4174670da71ed87024ba8678231b\"" Oct 2 20:07:58.171984 kubelet[2026]: E1002 20:07:58.171554 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:58.175876 env[1143]: time="2023-10-02T20:07:58.175838211Z" level=info msg="CreateContainer within sandbox \"64dc26a80e3ad692ccc3bc082ea23044f62d4174670da71ed87024ba8678231b\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:07:58.198226 env[1143]: time="2023-10-02T20:07:58.198178759Z" level=info msg="CreateContainer within sandbox \"64dc26a80e3ad692ccc3bc082ea23044f62d4174670da71ed87024ba8678231b\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"67c1610c89e4d94868c238c0ba0f255f0e0146be0526cfe5e7f23e89de89438f\"" Oct 2 20:07:58.205505 env[1143]: time="2023-10-02T20:07:58.205474475Z" level=info msg="StartContainer for \"67c1610c89e4d94868c238c0ba0f255f0e0146be0526cfe5e7f23e89de89438f\"" Oct 2 20:07:58.227557 systemd[1]: Started cri-containerd-67c1610c89e4d94868c238c0ba0f255f0e0146be0526cfe5e7f23e89de89438f.scope. Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2127 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637633136313063383965346439343836386332333863306261306632 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.259000 audit: BPF prog-id=116 op=LOAD Oct 2 20:07:58.259000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2127 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637633136313063383965346439343836386332333863306261306632 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit: BPF prog-id=117 op=LOAD Oct 2 20:07:58.260000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2127 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637633136313063383965346439343836386332333863306261306632 Oct 2 20:07:58.260000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:07:58.260000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.260000 audit: BPF prog-id=118 op=LOAD Oct 2 20:07:58.260000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2127 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637633136313063383965346439343836386332333863306261306632 Oct 2 20:07:58.288209 env[1143]: time="2023-10-02T20:07:58.288159172Z" level=info msg="StartContainer for \"67c1610c89e4d94868c238c0ba0f255f0e0146be0526cfe5e7f23e89de89438f\" returns successfully" Oct 2 20:07:58.393000 audit[2221]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.393000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe8539070 a2=0 a3=ffff8e9056c0 items=0 ppid=2180 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:07:58.393000 audit[2220]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.393000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff63c8a70 a2=0 a3=ffff80bd06c0 items=0 ppid=2180 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:07:58.395000 audit[2222]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.395000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc389b280 a2=0 a3=ffffa6f736c0 items=0 ppid=2180 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:07:58.397000 audit[2223]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.397000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff01a8770 a2=0 a3=ffffb17416c0 items=0 ppid=2180 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.397000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:07:58.398000 audit[2224]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.398000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcd27b8f0 a2=0 a3=ffff87ecf6c0 items=0 ppid=2180 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:07:58.398000 audit[2225]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.398000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd43f9dd0 a2=0 a3=ffff9c3ab6c0 items=0 ppid=2180 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.398000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:07:58.496000 audit[2226]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.496000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd2de5540 a2=0 a3=ffffa20f16c0 items=0 ppid=2180 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:07:58.500000 audit[2228]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.500000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcf8a6ab0 a2=0 a3=ffff9b2216c0 items=0 ppid=2180 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:07:58.504000 audit[2231]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.504000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffe621f70 a2=0 a3=ffff9bd636c0 items=0 ppid=2180 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:07:58.505000 audit[2232]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.505000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2e2ed70 a2=0 a3=ffff96a3a6c0 items=0 ppid=2180 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:07:58.508000 audit[2234]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.508000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe8aab900 a2=0 a3=ffffb60ce6c0 items=0 ppid=2180 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.508000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:07:58.509000 audit[2235]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.509000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff834a840 a2=0 a3=ffff8e1886c0 items=0 ppid=2180 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:07:58.512000 audit[2237]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.512000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff8fa4e70 a2=0 a3=ffff82f236c0 items=0 ppid=2180 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:07:58.515000 audit[2240]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.515000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdc65a760 a2=0 a3=ffff92e566c0 items=0 ppid=2180 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:07:58.517000 audit[2241]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.517000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd951f1f0 a2=0 a3=ffffbe2a96c0 items=0 ppid=2180 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:07:58.522681 kubelet[2026]: E1002 20:07:58.522655 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:58.528000 audit[2243]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.528000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdf930280 a2=0 a3=ffffb594a6c0 items=0 ppid=2180 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.528000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:07:58.530000 audit[2244]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.530000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffecb00a60 a2=0 a3=ffff9f5176c0 items=0 ppid=2180 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.530000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:07:58.533000 audit[2246]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.533000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc8cdb940 a2=0 a3=ffffa16f36c0 items=0 ppid=2180 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.533000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:58.536176 kubelet[2026]: I1002 20:07:58.536129 2026 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-vwl75" podStartSLOduration=1.5360938210000001 podCreationTimestamp="2023-10-02 20:07:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:07:58.53510839 +0000 UTC m=+16.173008707" watchObservedRunningTime="2023-10-02 20:07:58.536093821 +0000 UTC m=+16.173994098" Oct 2 20:07:58.538000 audit[2249]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.538000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdd6772e0 a2=0 a3=ffffa47206c0 items=0 ppid=2180 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.538000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:58.543000 audit[2252]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.543000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffde54cd60 a2=0 a3=ffff965b46c0 items=0 ppid=2180 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:07:58.544000 audit[2253]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.544000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc480e490 a2=0 a3=ffffa0e846c0 items=0 ppid=2180 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:07:58.547000 audit[2255]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.547000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff4336290 a2=0 a3=ffff936766c0 items=0 ppid=2180 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.547000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:58.551000 audit[2258]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.551000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff830af30 a2=0 a3=ffff8d05f6c0 items=0 ppid=2180 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:58.557000 audit[2263]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.557000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8a70790 a2=0 a3=ffffab9746c0 items=0 ppid=2180 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:07:58.559000 audit[2265]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:07:58.559000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffffabcc470 a2=0 a3=ffffb3f4c6c0 items=0 ppid=2180 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:07:58.573000 audit[2267]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:07:58.573000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffffa2720a0 a2=0 a3=ffff938bc6c0 items=0 ppid=2180 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:58.577000 audit[2267]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:07:58.577000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffffa2720a0 a2=0 a3=ffff938bc6c0 items=0 ppid=2180 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:58.583000 audit[2272]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.583000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff81b1eb0 a2=0 a3=ffffac8326c0 items=0 ppid=2180 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:07:58.586000 audit[2274]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.586000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe0807fa0 a2=0 a3=ffffbebc36c0 items=0 ppid=2180 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.586000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:07:58.593000 audit[2277]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.593000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc93d4b80 a2=0 a3=ffff8eef16c0 items=0 ppid=2180 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:07:58.594000 audit[2278]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.594000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0b289d0 a2=0 a3=ffff9feee6c0 items=0 ppid=2180 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:07:58.597000 audit[2280]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.597000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6ce0f90 a2=0 a3=ffff978426c0 items=0 ppid=2180 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.597000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:07:58.598000 audit[2281]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.598000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe934e2a0 a2=0 a3=ffffae2786c0 items=0 ppid=2180 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:07:58.601000 audit[2283]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.601000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffefa08c20 a2=0 a3=ffff9be906c0 items=0 ppid=2180 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.601000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:07:58.605000 audit[2286]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.605000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdfb1fe60 a2=0 a3=ffff954f36c0 items=0 ppid=2180 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.605000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:07:58.606000 audit[2287]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.606000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc2077cd0 a2=0 a3=ffffbcd1e6c0 items=0 ppid=2180 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.606000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:07:58.609000 audit[2289]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.609000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc685b2f0 a2=0 a3=ffff91e2b6c0 items=0 ppid=2180 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.609000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:07:58.610000 audit[2290]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.610000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd52ad7e0 a2=0 a3=ffff8139d6c0 items=0 ppid=2180 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.610000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:07:58.613000 audit[2292]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.613000 audit[2292]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffda1d0f90 a2=0 a3=ffff85f396c0 items=0 ppid=2180 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:07:58.616000 audit[2295]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.616000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffecf72e10 a2=0 a3=ffffb91356c0 items=0 ppid=2180 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.616000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:07:58.620000 audit[2298]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.620000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe96c79d0 a2=0 a3=ffff8b8f86c0 items=0 ppid=2180 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.620000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:07:58.621000 audit[2299]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.621000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffb295b20 a2=0 a3=ffffa6d456c0 items=0 ppid=2180 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.621000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:07:58.623000 audit[2301]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.623000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd951a130 a2=0 a3=ffffb832d6c0 items=0 ppid=2180 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:58.627000 audit[2304]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.627000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff20ce960 a2=0 a3=ffff896916c0 items=0 ppid=2180 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.627000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:07:58.630000 audit[2305]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.630000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6459df0 a2=0 a3=ffffb60dd6c0 items=0 ppid=2180 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:07:58.632000 audit[2307]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.632000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec0afea0 a2=0 a3=ffff9735a6c0 items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.632000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:58.636000 audit[2310]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.636000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdec3f1c0 a2=0 a3=ffff8d0146c0 items=0 ppid=2180 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.636000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:07:58.637000 audit[2311]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.637000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdda39350 a2=0 a3=ffff9e02d6c0 items=0 ppid=2180 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:07:58.640000 audit[2313]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:07:58.640000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc224da50 a2=0 a3=ffff8f2ed6c0 items=0 ppid=2180 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:07:58.643000 audit[2315]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:07:58.643000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffdaea34d0 a2=0 a3=ffff8dd5e6c0 items=0 ppid=2180 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.643000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:58.643000 audit[2315]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:07:58.643000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffdaea34d0 a2=0 a3=ffff8dd5e6c0 items=0 ppid=2180 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.643000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:07:58.766269 kubelet[2026]: E1002 20:07:58.766227 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:58.766750 env[1143]: time="2023-10-02T20:07:58.766709948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-nlzh2,Uid:c731b288-564f-493a-a6a8-a7178d354df5,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:58.784862 env[1143]: time="2023-10-02T20:07:58.784789900Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:58.784862 env[1143]: time="2023-10-02T20:07:58.784831395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:58.785065 env[1143]: time="2023-10-02T20:07:58.784841999Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:58.785343 env[1143]: time="2023-10-02T20:07:58.785277594Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088 pid=2324 runtime=io.containerd.runc.v2 Oct 2 20:07:58.797189 systemd[1]: Started cri-containerd-6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088.scope. Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.816000 audit: BPF prog-id=119 op=LOAD Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2324 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663656165356164643634623730396139663336336364376232626137 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2324 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663656165356164643634623730396139663336336364376232626137 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.817000 audit: BPF prog-id=120 op=LOAD Oct 2 20:07:58.817000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2324 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663656165356164643634623730396139663336336364376232626137 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit: BPF prog-id=121 op=LOAD Oct 2 20:07:58.818000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2324 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663656165356164643634623730396139663336336364376232626137 Oct 2 20:07:58.818000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:07:58.818000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { perfmon } for pid=2334 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit[2334]: AVC avc: denied { bpf } for pid=2334 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:58.818000 audit: BPF prog-id=122 op=LOAD Oct 2 20:07:58.818000 audit[2334]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2324 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:58.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663656165356164643634623730396139663336336364376232626137 Oct 2 20:07:58.842302 env[1143]: time="2023-10-02T20:07:58.842211969Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-nlzh2,Uid:c731b288-564f-493a-a6a8-a7178d354df5,Namespace:kube-system,Attempt:0,} returns sandbox id \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\"" Oct 2 20:07:58.842885 kubelet[2026]: E1002 20:07:58.842856 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:58.844397 env[1143]: time="2023-10-02T20:07:58.844199556Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:07:58.859041 kubelet[2026]: E1002 20:07:58.858998 2026 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:58.859150 kubelet[2026]: E1002 20:07:58.859002 2026 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:58.859150 kubelet[2026]: E1002 20:07:58.859113 2026 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets podName:febda0fe-6a93-400d-8c56-0e02135cc29e nodeName:}" failed. No retries permitted until 2023-10-02 20:07:59.359074929 +0000 UTC m=+16.996975246 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets") pod "cilium-6gcxl" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:58.859150 kubelet[2026]: E1002 20:07:58.859122 2026 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-6gcxl: failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:58.859267 kubelet[2026]: E1002 20:07:58.859171 2026 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls podName:febda0fe-6a93-400d-8c56-0e02135cc29e nodeName:}" failed. No retries permitted until 2023-10-02 20:07:59.359157838 +0000 UTC m=+16.997058155 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls") pod "cilium-6gcxl" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:07:59.550647 kubelet[2026]: E1002 20:07:59.549378 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:07:59.553368 env[1143]: time="2023-10-02T20:07:59.552643311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6gcxl,Uid:febda0fe-6a93-400d-8c56-0e02135cc29e,Namespace:kube-system,Attempt:0,}" Oct 2 20:07:59.597796 env[1143]: time="2023-10-02T20:07:59.597614237Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:07:59.597796 env[1143]: time="2023-10-02T20:07:59.597659773Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:07:59.597796 env[1143]: time="2023-10-02T20:07:59.597670736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:07:59.601777 env[1143]: time="2023-10-02T20:07:59.597855439Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d pid=2366 runtime=io.containerd.runc.v2 Oct 2 20:07:59.612126 systemd[1]: Started cri-containerd-4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d.scope. Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit: BPF prog-id=123 op=LOAD Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2366 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:59.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463323736306532386561306430333531386566316562636633663064 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2366 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:59.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463323736306532386561306430333531386566316562636633663064 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.634000 audit: BPF prog-id=124 op=LOAD Oct 2 20:07:59.634000 audit[2377]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2366 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:59.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463323736306532386561306430333531386566316562636633663064 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit: BPF prog-id=125 op=LOAD Oct 2 20:07:59.635000 audit[2377]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2366 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:59.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463323736306532386561306430333531386566316562636633663064 Oct 2 20:07:59.635000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:07:59.635000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:07:59.635000 audit: BPF prog-id=126 op=LOAD Oct 2 20:07:59.635000 audit[2377]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2366 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:59.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463323736306532386561306430333531386566316562636633663064 Oct 2 20:07:59.653947 env[1143]: time="2023-10-02T20:07:59.653895298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6gcxl,Uid:febda0fe-6a93-400d-8c56-0e02135cc29e,Namespace:kube-system,Attempt:0,} returns sandbox id \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\"" Oct 2 20:07:59.656919 kubelet[2026]: E1002 20:07:59.656712 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:00.278491 env[1143]: time="2023-10-02T20:08:00.278413593Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:00.279919 env[1143]: time="2023-10-02T20:08:00.279888915Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:00.282033 env[1143]: time="2023-10-02T20:08:00.281983320Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 20:08:00.282943 env[1143]: time="2023-10-02T20:08:00.282366765Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:00.283468 env[1143]: time="2023-10-02T20:08:00.283413947Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:08:00.285541 env[1143]: time="2023-10-02T20:08:00.285111862Z" level=info msg="CreateContainer within sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:08:00.294832 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3151949000.mount: Deactivated successfully. Oct 2 20:08:00.298365 env[1143]: time="2023-10-02T20:08:00.298305453Z" level=info msg="CreateContainer within sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\"" Oct 2 20:08:00.300453 env[1143]: time="2023-10-02T20:08:00.299472315Z" level=info msg="StartContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\"" Oct 2 20:08:00.317503 systemd[1]: Started cri-containerd-e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e.scope. Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.339000 audit: BPF prog-id=127 op=LOAD Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2324 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:00.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534646237303138633133336336663966373934336664373062373465 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2324 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:00.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534646237303138633133336336663966373934336664373062373465 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit: BPF prog-id=128 op=LOAD Oct 2 20:08:00.340000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2324 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:00.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534646237303138633133336336663966373934336664373062373465 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.340000 audit: BPF prog-id=129 op=LOAD Oct 2 20:08:00.340000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2324 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:00.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534646237303138633133336336663966373934336664373062373465 Oct 2 20:08:00.340000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:08:00.341000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { perfmon } for pid=2407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit[2407]: AVC avc: denied { bpf } for pid=2407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:08:00.341000 audit: BPF prog-id=130 op=LOAD Oct 2 20:08:00.341000 audit[2407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2324 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:00.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534646237303138633133336336663966373934336664373062373465 Oct 2 20:08:00.361959 env[1143]: time="2023-10-02T20:08:00.361910757Z" level=info msg="StartContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" returns successfully" Oct 2 20:08:00.420000 audit[2418]: AVC avc: denied { map_create } for pid=2418 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c322,c439 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c322,c439 tclass=bpf permissive=0 Oct 2 20:08:00.420000 audit[2418]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400062f768 a2=48 a3=0 items=0 ppid=2324 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c322,c439 key=(null) Oct 2 20:08:00.420000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:08:00.529682 kubelet[2026]: E1002 20:08:00.529590 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:01.536369 kubelet[2026]: E1002 20:08:01.536323 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:02.496725 kubelet[2026]: I1002 20:08:02.496604 2026 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-nlzh2" podStartSLOduration=4.057582137 podCreationTimestamp="2023-10-02 20:07:57 +0000 UTC" firstStartedPulling="2023-10-02 20:07:58.84345001 +0000 UTC m=+16.481350327" lastFinishedPulling="2023-10-02 20:08:00.282437348 +0000 UTC m=+17.920337665" observedRunningTime="2023-10-02 20:08:00.543079637 +0000 UTC m=+18.180979994" watchObservedRunningTime="2023-10-02 20:08:02.496569475 +0000 UTC m=+20.134469792" Oct 2 20:08:05.621040 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount15123965.mount: Deactivated successfully. Oct 2 20:08:07.995991 env[1143]: time="2023-10-02T20:08:07.995939907Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:07.997714 env[1143]: time="2023-10-02T20:08:07.997680982Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:07.999253 env[1143]: time="2023-10-02T20:08:07.999220167Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:08:07.999901 env[1143]: time="2023-10-02T20:08:07.999872731Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 20:08:08.001949 env[1143]: time="2023-10-02T20:08:08.001908076Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:08:08.013645 env[1143]: time="2023-10-02T20:08:08.013578418Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" Oct 2 20:08:08.014228 env[1143]: time="2023-10-02T20:08:08.014195048Z" level=info msg="StartContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" Oct 2 20:08:08.037662 systemd[1]: Started cri-containerd-2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827.scope. Oct 2 20:08:08.069947 systemd[1]: cri-containerd-2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827.scope: Deactivated successfully. Oct 2 20:08:08.318375 env[1143]: time="2023-10-02T20:08:08.318322722Z" level=info msg="shim disconnected" id=2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827 Oct 2 20:08:08.318375 env[1143]: time="2023-10-02T20:08:08.318375454Z" level=warning msg="cleaning up after shim disconnected" id=2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827 namespace=k8s.io Oct 2 20:08:08.318625 env[1143]: time="2023-10-02T20:08:08.318385257Z" level=info msg="cleaning up dead shim" Oct 2 20:08:08.327473 env[1143]: time="2023-10-02T20:08:08.327398437Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2465 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:08.327826 env[1143]: time="2023-10-02T20:08:08.327696029Z" level=error msg="copy shim log" error="read /proc/self/fd/60: file already closed" Oct 2 20:08:08.328046 env[1143]: time="2023-10-02T20:08:08.328004103Z" level=error msg="Failed to pipe stdout of container \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" error="reading from a closed fifo" Oct 2 20:08:08.328131 env[1143]: time="2023-10-02T20:08:08.328029349Z" level=error msg="Failed to pipe stderr of container \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" error="reading from a closed fifo" Oct 2 20:08:08.330919 env[1143]: time="2023-10-02T20:08:08.330833027Z" level=error msg="StartContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:08.331579 kubelet[2026]: E1002 20:08:08.331504 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827" Oct 2 20:08:08.333536 kubelet[2026]: E1002 20:08:08.333505 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:08.333536 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:08.333536 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:08:08.334194 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:08.334194 kubelet[2026]: E1002 20:08:08.333906 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:08.558847 kubelet[2026]: E1002 20:08:08.558820 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:08.565447 env[1143]: time="2023-10-02T20:08:08.564689826Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:08:08.626585 env[1143]: time="2023-10-02T20:08:08.626038183Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" Oct 2 20:08:08.627710 env[1143]: time="2023-10-02T20:08:08.626900992Z" level=info msg="StartContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" Oct 2 20:08:08.644265 systemd[1]: Started cri-containerd-d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9.scope. Oct 2 20:08:08.678051 systemd[1]: cri-containerd-d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9.scope: Deactivated successfully. Oct 2 20:08:08.684885 env[1143]: time="2023-10-02T20:08:08.684832083Z" level=info msg="shim disconnected" id=d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9 Oct 2 20:08:08.685104 env[1143]: time="2023-10-02T20:08:08.685084624Z" level=warning msg="cleaning up after shim disconnected" id=d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9 namespace=k8s.io Oct 2 20:08:08.685167 env[1143]: time="2023-10-02T20:08:08.685154441Z" level=info msg="cleaning up dead shim" Oct 2 20:08:08.693250 env[1143]: time="2023-10-02T20:08:08.693204948Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2502 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:08.693666 env[1143]: time="2023-10-02T20:08:08.693607805Z" level=error msg="copy shim log" error="read /proc/self/fd/60: file already closed" Oct 2 20:08:08.693928 env[1143]: time="2023-10-02T20:08:08.693884992Z" level=error msg="Failed to pipe stderr of container \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" error="reading from a closed fifo" Oct 2 20:08:08.694049 env[1143]: time="2023-10-02T20:08:08.694017784Z" level=error msg="Failed to pipe stdout of container \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" error="reading from a closed fifo" Oct 2 20:08:08.695680 env[1143]: time="2023-10-02T20:08:08.695636776Z" level=error msg="StartContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:08.696249 kubelet[2026]: E1002 20:08:08.696040 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9" Oct 2 20:08:08.696249 kubelet[2026]: E1002 20:08:08.696183 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:08.696249 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:08.696249 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:08:08.696249 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:08.696249 kubelet[2026]: E1002 20:08:08.696222 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:09.008170 systemd[1]: run-containerd-runc-k8s.io-2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827-runc.9wR3XI.mount: Deactivated successfully. Oct 2 20:08:09.008272 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827-rootfs.mount: Deactivated successfully. Oct 2 20:08:09.561776 kubelet[2026]: I1002 20:08:09.561751 2026 scope.go:115] "RemoveContainer" containerID="2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827" Oct 2 20:08:09.562470 kubelet[2026]: I1002 20:08:09.562391 2026 scope.go:115] "RemoveContainer" containerID="2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827" Oct 2 20:08:09.563407 env[1143]: time="2023-10-02T20:08:09.563370328Z" level=info msg="RemoveContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" Oct 2 20:08:09.564102 env[1143]: time="2023-10-02T20:08:09.564075253Z" level=info msg="RemoveContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\"" Oct 2 20:08:09.564235 env[1143]: time="2023-10-02T20:08:09.564205164Z" level=error msg="RemoveContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\" failed" error="failed to set removing state for container \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\": container is already in removing state" Oct 2 20:08:09.564752 kubelet[2026]: E1002 20:08:09.564737 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\": container is already in removing state" containerID="2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827" Oct 2 20:08:09.567105 env[1143]: time="2023-10-02T20:08:09.567064873Z" level=info msg="RemoveContainer for \"2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827\" returns successfully" Oct 2 20:08:09.567557 kubelet[2026]: E1002 20:08:09.567539 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827": container is already in removing state; Skipping pod "cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)" Oct 2 20:08:09.567863 kubelet[2026]: E1002 20:08:09.567850 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:09.568460 kubelet[2026]: E1002 20:08:09.568439 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:10.564770 kubelet[2026]: E1002 20:08:10.564746 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:10.565593 kubelet[2026]: E1002 20:08:10.565575 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:11.423971 kubelet[2026]: W1002 20:08:11.423914 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827.scope WatchSource:0}: container "2656c1c04f13fd3dca1104579177a9ec0517d06cd73a38d762ddac70e5ff8827" in namespace "k8s.io": not found Oct 2 20:08:14.531039 kubelet[2026]: W1002 20:08:14.530994 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9.scope WatchSource:0}: task d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9 not found: not found Oct 2 20:08:14.545386 kubelet[2026]: I1002 20:08:14.545362 2026 eviction_manager.go:346] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 20:08:14.545668 kubelet[2026]: I1002 20:08:14.545657 2026 container_gc.go:86] "Attempting to delete unused containers" Oct 2 20:08:14.549838 kubelet[2026]: I1002 20:08:14.549807 2026 image_gc_manager.go:340] "Attempting to delete unused images" Oct 2 20:08:14.551141 kubelet[2026]: I1002 20:08:14.551121 2026 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108" size=14557471 Oct 2 20:08:14.551646 env[1143]: time="2023-10-02T20:08:14.551444465Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 20:08:14.552705 env[1143]: time="2023-10-02T20:08:14.552667592Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.10.1,XXX_unrecognized:[],}" Oct 2 20:08:14.553266 env[1143]: time="2023-10-02T20:08:14.553223944Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,XXX_unrecognized:[],}" Oct 2 20:08:14.554438 env[1143]: time="2023-10-02T20:08:14.553789658Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,XXX_unrecognized:[],}" Oct 2 20:08:14.562773 env[1143]: time="2023-10-02T20:08:14.562734940Z" level=info msg="RemoveImage \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\" returns successfully" Oct 2 20:08:14.565036 kubelet[2026]: I1002 20:08:14.565011 2026 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e" size=253553 Oct 2 20:08:14.565356 env[1143]: time="2023-10-02T20:08:14.565254728Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\"" Oct 2 20:08:14.566520 env[1143]: time="2023-10-02T20:08:14.566495138Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 20:08:14.567145 env[1143]: time="2023-10-02T20:08:14.567123745Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 20:08:14.567619 env[1143]: time="2023-10-02T20:08:14.567601081Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,XXX_unrecognized:[],}" Oct 2 20:08:14.570275 env[1143]: time="2023-10-02T20:08:14.570250575Z" level=info msg="RemoveImage \"sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e\" returns successfully" Oct 2 20:08:14.570465 kubelet[2026]: I1002 20:08:14.570446 2026 image_gc_manager.go:400] "Removing image to free bytes" imageID="sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737" size=80665728 Oct 2 20:08:14.570620 env[1143]: time="2023-10-02T20:08:14.570587923Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 20:08:14.571269 env[1143]: time="2023-10-02T20:08:14.571239734Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.7-0,XXX_unrecognized:[],}" Oct 2 20:08:14.571829 env[1143]: time="2023-10-02T20:08:14.571807248Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,XXX_unrecognized:[],}" Oct 2 20:08:14.572325 env[1143]: time="2023-10-02T20:08:14.572273142Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,XXX_unrecognized:[],}" Oct 2 20:08:14.621775 env[1143]: time="2023-10-02T20:08:14.621703263Z" level=info msg="RemoveImage \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\" returns successfully" Oct 2 20:08:14.631030 kubelet[2026]: I1002 20:08:14.631003 2026 eviction_manager.go:353] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 20:08:22.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.7:22-10.0.0.1:39942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:22.445901 systemd[1]: Started sshd@7-10.0.0.7:22-10.0.0.1:39942.service. Oct 2 20:08:22.446701 kernel: kauditd_printk_skb: 417 callbacks suppressed Oct 2 20:08:22.446743 kernel: audit: type=1130 audit(1696277302.445:1071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.7:22-10.0.0.1:39942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:22.484697 kubelet[2026]: E1002 20:08:22.484670 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:22.487304 env[1143]: time="2023-10-02T20:08:22.487174334Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:08:22.490000 audit[2515]: USER_ACCT pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.492031 sshd[2515]: Accepted publickey for core from 10.0.0.1 port 39942 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:22.496456 kernel: audit: type=1101 audit(1696277302.490:1072): pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.496000 audit[2515]: CRED_ACQ pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.498854 sshd[2515]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:22.503117 systemd-logind[1133]: New session 8 of user core. Oct 2 20:08:22.503632 env[1143]: time="2023-10-02T20:08:22.503400126Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" Oct 2 20:08:22.503764 systemd[1]: Started session-8.scope. Oct 2 20:08:22.504170 kernel: audit: type=1103 audit(1696277302.496:1073): pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.504213 kernel: audit: type=1006 audit(1696277302.496:1074): pid=2515 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:08:22.504232 kernel: audit: type=1300 audit(1696277302.496:1074): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd12afec0 a2=3 a3=1 items=0 ppid=1 pid=2515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:22.496000 audit[2515]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd12afec0 a2=3 a3=1 items=0 ppid=1 pid=2515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:22.507824 env[1143]: time="2023-10-02T20:08:22.507757454Z" level=info msg="StartContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" Oct 2 20:08:22.496000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:22.509931 kernel: audit: type=1327 audit(1696277302.496:1074): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:22.510000 audit[2515]: USER_START pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.512000 audit[2522]: CRED_ACQ pid=2522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.517991 kernel: audit: type=1105 audit(1696277302.510:1075): pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.518049 kernel: audit: type=1103 audit(1696277302.512:1076): pid=2522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.530090 systemd[1]: Started cri-containerd-8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023.scope. Oct 2 20:08:22.605073 systemd[1]: cri-containerd-8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023.scope: Deactivated successfully. Oct 2 20:08:22.608789 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023-rootfs.mount: Deactivated successfully. Oct 2 20:08:22.616411 env[1143]: time="2023-10-02T20:08:22.616357001Z" level=info msg="shim disconnected" id=8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023 Oct 2 20:08:22.616411 env[1143]: time="2023-10-02T20:08:22.616411490Z" level=warning msg="cleaning up after shim disconnected" id=8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023 namespace=k8s.io Oct 2 20:08:22.616707 env[1143]: time="2023-10-02T20:08:22.616433293Z" level=info msg="cleaning up dead shim" Oct 2 20:08:22.626057 env[1143]: time="2023-10-02T20:08:22.626000452Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2552 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:22.626320 env[1143]: time="2023-10-02T20:08:22.626255935Z" level=error msg="copy shim log" error="read /proc/self/fd/60: file already closed" Oct 2 20:08:22.626493 env[1143]: time="2023-10-02T20:08:22.626446286Z" level=error msg="Failed to pipe stdout of container \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" error="reading from a closed fifo" Oct 2 20:08:22.626546 env[1143]: time="2023-10-02T20:08:22.626522499Z" level=error msg="Failed to pipe stderr of container \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" error="reading from a closed fifo" Oct 2 20:08:22.627781 env[1143]: time="2023-10-02T20:08:22.627733342Z" level=error msg="StartContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:22.627985 kubelet[2026]: E1002 20:08:22.627963 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023" Oct 2 20:08:22.628088 kubelet[2026]: E1002 20:08:22.628073 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:22.628088 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:22.628088 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:08:22.628088 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:22.628234 kubelet[2026]: E1002 20:08:22.628113 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:22.681477 sshd[2515]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:22.680000 audit[2515]: USER_END pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.684039 systemd-logind[1133]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:08:22.684265 systemd[1]: sshd@7-10.0.0.7:22-10.0.0.1:39942.service: Deactivated successfully. Oct 2 20:08:22.684998 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:08:22.685760 systemd-logind[1133]: Removed session 8. Oct 2 20:08:22.681000 audit[2515]: CRED_DISP pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.689076 kernel: audit: type=1106 audit(1696277302.680:1077): pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.689154 kernel: audit: type=1104 audit(1696277302.681:1078): pid=2515 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:22.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.7:22-10.0.0.1:39942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:23.591588 kubelet[2026]: I1002 20:08:23.591550 2026 scope.go:115] "RemoveContainer" containerID="d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9" Oct 2 20:08:23.591903 kubelet[2026]: I1002 20:08:23.591888 2026 scope.go:115] "RemoveContainer" containerID="d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9" Oct 2 20:08:23.592993 env[1143]: time="2023-10-02T20:08:23.592942502Z" level=info msg="RemoveContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" Oct 2 20:08:23.594474 env[1143]: time="2023-10-02T20:08:23.593557003Z" level=info msg="RemoveContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\"" Oct 2 20:08:23.594592 env[1143]: time="2023-10-02T20:08:23.594548806Z" level=error msg="RemoveContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\" failed" error="failed to set removing state for container \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\": container is already in removing state" Oct 2 20:08:23.594771 kubelet[2026]: E1002 20:08:23.594748 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\": container is already in removing state" containerID="d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9" Oct 2 20:08:23.594830 kubelet[2026]: E1002 20:08:23.594782 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9": container is already in removing state; Skipping pod "cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)" Oct 2 20:08:23.594859 kubelet[2026]: E1002 20:08:23.594841 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:23.595079 kubelet[2026]: E1002 20:08:23.595060 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:23.596135 env[1143]: time="2023-10-02T20:08:23.596018406Z" level=info msg="RemoveContainer for \"d742e1565d97145e679a8d39ae6eb00bf5f48b1d429fef1252a37c0824f43ea9\" returns successfully" Oct 2 20:08:25.722501 kubelet[2026]: W1002 20:08:25.722465 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023.scope WatchSource:0}: task 8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023 not found: not found Oct 2 20:08:32.688382 systemd[1]: Started sshd@8-10.0.0.7:22-10.0.0.1:39974.service. Oct 2 20:08:32.692444 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:32.692525 kernel: audit: type=1130 audit(1696277312.687:1080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.7:22-10.0.0.1:39974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:32.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.7:22-10.0.0.1:39974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:32.730000 audit[2573]: USER_ACCT pid=2573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.734162 sshd[2573]: Accepted publickey for core from 10.0.0.1 port 39974 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:32.734495 sshd[2573]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:32.732000 audit[2573]: CRED_ACQ pid=2573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.738288 kernel: audit: type=1101 audit(1696277312.730:1081): pid=2573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.738387 kernel: audit: type=1103 audit(1696277312.732:1082): pid=2573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.738412 kernel: audit: type=1006 audit(1696277312.732:1083): pid=2573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:08:32.740534 kernel: audit: type=1300 audit(1696277312.732:1083): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2fcec50 a2=3 a3=1 items=0 ppid=1 pid=2573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:32.732000 audit[2573]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2fcec50 a2=3 a3=1 items=0 ppid=1 pid=2573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:32.732000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:32.744647 kernel: audit: type=1327 audit(1696277312.732:1083): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:32.747106 systemd[1]: Started session-9.scope. Oct 2 20:08:32.747674 systemd-logind[1133]: New session 9 of user core. Oct 2 20:08:32.749000 audit[2573]: USER_START pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.749000 audit[2575]: CRED_ACQ pid=2575 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.757451 kernel: audit: type=1105 audit(1696277312.749:1084): pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.757498 kernel: audit: type=1103 audit(1696277312.749:1085): pid=2575 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.862403 sshd[2573]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:32.862000 audit[2573]: USER_END pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.864760 systemd[1]: sshd@8-10.0.0.7:22-10.0.0.1:39974.service: Deactivated successfully. Oct 2 20:08:32.865519 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:08:32.862000 audit[2573]: CRED_DISP pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.869360 kernel: audit: type=1106 audit(1696277312.862:1086): pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.869430 kernel: audit: type=1104 audit(1696277312.862:1087): pid=2573 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:32.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.7:22-10.0.0.1:39974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:32.869855 systemd-logind[1133]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:08:32.870559 systemd-logind[1133]: Removed session 9. Oct 2 20:08:36.484772 kubelet[2026]: E1002 20:08:36.484560 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:36.485092 kubelet[2026]: E1002 20:08:36.485001 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:39.236000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.238563 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:39.238674 kernel: audit: type=1400 audit(1696277319.236:1089): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.236000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c5e1e80 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.245128 kernel: audit: type=1300 audit(1696277319.236:1089): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c5e1e80 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.245209 kernel: audit: type=1327 audit(1696277319.236:1089): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.237000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.251176 kernel: audit: type=1400 audit(1696277319.237:1090): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.251231 kernel: audit: type=1300 audit(1696277319.237:1090): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4009afd230 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.237000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4009afd230 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.257990 kernel: audit: type=1327 audit(1696277319.237:1090): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.258032 kernel: audit: type=1400 audit(1696277319.237:1091): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.237000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.237000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009bf60f0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.264532 kernel: audit: type=1300 audit(1696277319.237:1091): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009bf60f0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.264589 kernel: audit: type=1327 audit(1696277319.237:1091): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.244000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.270519 kernel: audit: type=1400 audit(1696277319.244:1092): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.244000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.244000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009afd2f0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.244000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c35ba80 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.248000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.248000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40099f30e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:08:39.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:08:39.616000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.616000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010106e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:39.616000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:39.616000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:39.616000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010c1a10 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:39.616000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:42.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.7:22-10.0.0.1:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:42.868555 systemd[1]: Started sshd@9-10.0.0.7:22-10.0.0.1:54880.service. Oct 2 20:08:42.906000 audit[2589]: USER_ACCT pid=2589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:42.908258 sshd[2589]: Accepted publickey for core from 10.0.0.1 port 54880 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:42.907000 audit[2589]: CRED_ACQ pid=2589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:42.907000 audit[2589]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0264870 a2=3 a3=1 items=0 ppid=1 pid=2589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:42.907000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:42.909518 sshd[2589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:42.913153 systemd-logind[1133]: New session 10 of user core. Oct 2 20:08:42.914109 systemd[1]: Started session-10.scope. Oct 2 20:08:42.916000 audit[2589]: USER_START pid=2589 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:42.918000 audit[2591]: CRED_ACQ pid=2591 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:43.034991 sshd[2589]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:43.034000 audit[2589]: USER_END pid=2589 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:43.034000 audit[2589]: CRED_DISP pid=2589 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:43.037532 systemd[1]: sshd@9-10.0.0.7:22-10.0.0.1:54880.service: Deactivated successfully. Oct 2 20:08:43.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.7:22-10.0.0.1:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:43.038275 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:08:43.038840 systemd-logind[1133]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:08:43.039593 systemd-logind[1133]: Removed session 10. Oct 2 20:08:47.484542 kubelet[2026]: E1002 20:08:47.484508 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:47.488728 env[1143]: time="2023-10-02T20:08:47.488672999Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:08:47.497008 env[1143]: time="2023-10-02T20:08:47.496961000Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" Oct 2 20:08:47.497510 env[1143]: time="2023-10-02T20:08:47.497476548Z" level=info msg="StartContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" Oct 2 20:08:47.513300 systemd[1]: Started cri-containerd-3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2.scope. Oct 2 20:08:47.558080 systemd[1]: cri-containerd-3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2.scope: Deactivated successfully. Oct 2 20:08:47.562143 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2-rootfs.mount: Deactivated successfully. Oct 2 20:08:47.569570 env[1143]: time="2023-10-02T20:08:47.569519456Z" level=info msg="shim disconnected" id=3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2 Oct 2 20:08:47.569709 env[1143]: time="2023-10-02T20:08:47.569575851Z" level=warning msg="cleaning up after shim disconnected" id=3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2 namespace=k8s.io Oct 2 20:08:47.569709 env[1143]: time="2023-10-02T20:08:47.569586450Z" level=info msg="cleaning up dead shim" Oct 2 20:08:47.577212 env[1143]: time="2023-10-02T20:08:47.577166202Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2627 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:47.577590 env[1143]: time="2023-10-02T20:08:47.577535885Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:08:47.577893 env[1143]: time="2023-10-02T20:08:47.577832455Z" level=error msg="Failed to pipe stderr of container \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" error="reading from a closed fifo" Oct 2 20:08:47.578527 env[1143]: time="2023-10-02T20:08:47.578490268Z" level=error msg="Failed to pipe stdout of container \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" error="reading from a closed fifo" Oct 2 20:08:47.580397 env[1143]: time="2023-10-02T20:08:47.580349480Z" level=error msg="StartContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:47.580636 kubelet[2026]: E1002 20:08:47.580604 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2" Oct 2 20:08:47.580805 kubelet[2026]: E1002 20:08:47.580786 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:47.580805 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:47.580805 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:08:47.580805 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:47.580960 kubelet[2026]: E1002 20:08:47.580832 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:47.630824 kubelet[2026]: I1002 20:08:47.630792 2026 scope.go:115] "RemoveContainer" containerID="8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023" Oct 2 20:08:47.632339 kubelet[2026]: I1002 20:08:47.631220 2026 scope.go:115] "RemoveContainer" containerID="8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023" Oct 2 20:08:47.634482 env[1143]: time="2023-10-02T20:08:47.634451525Z" level=info msg="RemoveContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" Oct 2 20:08:47.635785 env[1143]: time="2023-10-02T20:08:47.635740314Z" level=info msg="RemoveContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\"" Oct 2 20:08:47.636004 env[1143]: time="2023-10-02T20:08:47.635961332Z" level=error msg="RemoveContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\" failed" error="failed to set removing state for container \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\": container is already in removing state" Oct 2 20:08:47.636234 kubelet[2026]: E1002 20:08:47.636158 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\": container is already in removing state" containerID="8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023" Oct 2 20:08:47.636234 kubelet[2026]: E1002 20:08:47.636196 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023": container is already in removing state; Skipping pod "cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)" Oct 2 20:08:47.636322 kubelet[2026]: E1002 20:08:47.636279 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:08:47.636558 kubelet[2026]: E1002 20:08:47.636538 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:08:47.637367 env[1143]: time="2023-10-02T20:08:47.637334993Z" level=info msg="RemoveContainer for \"8c565a0808d383b0ac18bff5c1c925b57d45b0e896f5ace858611483d0ee7023\" returns successfully" Oct 2 20:08:50.674586 kubelet[2026]: W1002 20:08:50.674541 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2.scope WatchSource:0}: task 3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2 not found: not found Oct 2 20:08:53.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:53.038514 systemd[1]: Started sshd@10-10.0.0.7:22-10.0.0.1:52518.service. Oct 2 20:08:53.039467 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:53.039537 kernel: audit: type=1130 audit(1696277333.037:1106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:53.076000 audit[2641]: USER_ACCT pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.077983 sshd[2641]: Accepted publickey for core from 10.0.0.1 port 52518 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:08:53.078985 sshd[2641]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:53.077000 audit[2641]: CRED_ACQ pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.083118 systemd[1]: Started session-11.scope. Oct 2 20:08:53.083597 systemd-logind[1133]: New session 11 of user core. Oct 2 20:08:53.084795 kernel: audit: type=1101 audit(1696277333.076:1107): pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.084826 kernel: audit: type=1103 audit(1696277333.077:1108): pid=2641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.084848 kernel: audit: type=1006 audit(1696277333.077:1109): pid=2641 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:08:53.086414 kernel: audit: type=1300 audit(1696277333.077:1109): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d7b020 a2=3 a3=1 items=0 ppid=1 pid=2641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:53.077000 audit[2641]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d7b020 a2=3 a3=1 items=0 ppid=1 pid=2641 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:53.089597 kernel: audit: type=1327 audit(1696277333.077:1109): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:53.077000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:53.087000 audit[2641]: USER_START pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.094056 kernel: audit: type=1105 audit(1696277333.087:1110): pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.094109 kernel: audit: type=1103 audit(1696277333.088:1111): pid=2643 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.088000 audit[2643]: CRED_ACQ pid=2643 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.197816 sshd[2641]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:53.197000 audit[2641]: USER_END pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.200637 systemd[1]: sshd@10-10.0.0.7:22-10.0.0.1:52518.service: Deactivated successfully. Oct 2 20:08:53.201472 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:08:53.202171 systemd-logind[1133]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:08:53.197000 audit[2641]: CRED_DISP pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.202907 systemd-logind[1133]: Removed session 11. Oct 2 20:08:53.204926 kernel: audit: type=1106 audit(1696277333.197:1112): pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.204986 kernel: audit: type=1104 audit(1696277333.197:1113): pid=2641 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:08:53.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.7:22-10.0.0.1:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:54.845000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:54.845000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017c19a0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:54.845000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:54.845000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:54.845000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e431a0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:54.845000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e43300 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40017c19c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:08:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:56.484456 kubelet[2026]: E1002 20:08:56.484425 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:00.483798 kubelet[2026]: E1002 20:09:00.483766 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:00.484388 kubelet[2026]: E1002 20:09:00.484364 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:03.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:41226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:03.202671 systemd[1]: Started sshd@11-10.0.0.7:22-10.0.0.1:41226.service. Oct 2 20:09:03.203565 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:09:03.203617 kernel: audit: type=1130 audit(1696277343.202:1119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:41226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:03.241000 audit[2658]: USER_ACCT pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.242100 sshd[2658]: Accepted publickey for core from 10.0.0.1 port 41226 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:03.243134 sshd[2658]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:03.245965 kernel: audit: type=1101 audit(1696277343.241:1120): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.247733 kernel: audit: type=1103 audit(1696277343.242:1121): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.242000 audit[2658]: CRED_ACQ pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.247008 systemd[1]: Started session-12.scope. Oct 2 20:09:03.247318 systemd-logind[1133]: New session 12 of user core. Oct 2 20:09:03.250120 kernel: audit: type=1006 audit(1696277343.242:1122): pid=2658 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:09:03.250192 kernel: audit: type=1300 audit(1696277343.242:1122): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1875710 a2=3 a3=1 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:03.242000 audit[2658]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1875710 a2=3 a3=1 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:03.242000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:03.254409 kernel: audit: type=1327 audit(1696277343.242:1122): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:03.254481 kernel: audit: type=1105 audit(1696277343.251:1123): pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.251000 audit[2658]: USER_START pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.252000 audit[2660]: CRED_ACQ pid=2660 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.260463 kernel: audit: type=1103 audit(1696277343.252:1124): pid=2660 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.361267 sshd[2658]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:03.361000 audit[2658]: USER_END pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.364119 systemd[1]: sshd@11-10.0.0.7:22-10.0.0.1:41226.service: Deactivated successfully. Oct 2 20:09:03.364977 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:09:03.365535 systemd-logind[1133]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:09:03.368972 kernel: audit: type=1106 audit(1696277343.361:1125): pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.369034 kernel: audit: type=1104 audit(1696277343.361:1126): pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.361000 audit[2658]: CRED_DISP pid=2658 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:03.366185 systemd-logind[1133]: Removed session 12. Oct 2 20:09:03.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.7:22-10.0.0.1:41226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.485255 kubelet[2026]: E1002 20:09:06.485219 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:09.484002 kubelet[2026]: E1002 20:09:09.483964 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:10.484155 kubelet[2026]: E1002 20:09:10.484119 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:12.483959 kubelet[2026]: E1002 20:09:12.483930 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:12.484556 kubelet[2026]: E1002 20:09:12.484535 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:13.366767 systemd[1]: Started sshd@12-10.0.0.7:22-10.0.0.1:60494.service. Oct 2 20:09:13.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:13.368110 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:13.368178 kernel: audit: type=1130 audit(1696277353.366:1128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:13.404000 audit[2672]: USER_ACCT pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.405395 sshd[2672]: Accepted publickey for core from 10.0.0.1 port 60494 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:13.406445 sshd[2672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:13.405000 audit[2672]: CRED_ACQ pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.410296 systemd[1]: Started session-13.scope. Oct 2 20:09:13.411207 kernel: audit: type=1101 audit(1696277353.404:1129): pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.411235 kernel: audit: type=1103 audit(1696277353.405:1130): pid=2672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.411252 kernel: audit: type=1006 audit(1696277353.405:1131): pid=2672 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:09:13.410672 systemd-logind[1133]: New session 13 of user core. Oct 2 20:09:13.405000 audit[2672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb722ce0 a2=3 a3=1 items=0 ppid=1 pid=2672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:13.415998 kernel: audit: type=1300 audit(1696277353.405:1131): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb722ce0 a2=3 a3=1 items=0 ppid=1 pid=2672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:13.416068 kernel: audit: type=1327 audit(1696277353.405:1131): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:13.405000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:13.414000 audit[2672]: USER_START pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.420401 kernel: audit: type=1105 audit(1696277353.414:1132): pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.420519 kernel: audit: type=1103 audit(1696277353.415:1133): pid=2674 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.415000 audit[2674]: CRED_ACQ pid=2674 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.523710 sshd[2672]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:13.524000 audit[2672]: USER_END pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.526467 systemd[1]: sshd@12-10.0.0.7:22-10.0.0.1:60494.service: Deactivated successfully. Oct 2 20:09:13.527323 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:09:13.524000 audit[2672]: CRED_DISP pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.528033 systemd-logind[1133]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:09:13.529010 systemd-logind[1133]: Removed session 13. Oct 2 20:09:13.530693 kernel: audit: type=1106 audit(1696277353.524:1134): pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.530763 kernel: audit: type=1104 audit(1696277353.524:1135): pid=2672 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:13.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.7:22-10.0.0.1:60494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:16.485319 kubelet[2026]: E1002 20:09:16.485276 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:23.484479 kubelet[2026]: E1002 20:09:23.484448 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:23.485123 kubelet[2026]: E1002 20:09:23.485101 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:23.528496 systemd[1]: Started sshd@13-10.0.0.7:22-10.0.0.1:55012.service. Oct 2 20:09:23.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.7:22-10.0.0.1:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:23.532055 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:23.532144 kernel: audit: type=1130 audit(1696277363.527:1137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.7:22-10.0.0.1:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:23.566000 audit[2687]: USER_ACCT pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.568125 sshd[2687]: Accepted publickey for core from 10.0.0.1 port 55012 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:23.569066 sshd[2687]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:23.568000 audit[2687]: CRED_ACQ pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.572910 systemd[1]: Started session-14.scope. Oct 2 20:09:23.573197 systemd-logind[1133]: New session 14 of user core. Oct 2 20:09:23.574426 kernel: audit: type=1101 audit(1696277363.566:1138): pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.574472 kernel: audit: type=1103 audit(1696277363.568:1139): pid=2687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.574496 kernel: audit: type=1006 audit(1696277363.568:1140): pid=2687 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:09:23.568000 audit[2687]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc73744c0 a2=3 a3=1 items=0 ppid=1 pid=2687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:23.579194 kernel: audit: type=1300 audit(1696277363.568:1140): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc73744c0 a2=3 a3=1 items=0 ppid=1 pid=2687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:23.579255 kernel: audit: type=1327 audit(1696277363.568:1140): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:23.568000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:23.575000 audit[2687]: USER_START pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.583421 kernel: audit: type=1105 audit(1696277363.575:1141): pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.583459 kernel: audit: type=1103 audit(1696277363.576:1142): pid=2689 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.576000 audit[2689]: CRED_ACQ pid=2689 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.696759 sshd[2687]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:23.696000 audit[2687]: USER_END pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.699548 systemd[1]: sshd@13-10.0.0.7:22-10.0.0.1:55012.service: Deactivated successfully. Oct 2 20:09:23.700393 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:09:23.700953 systemd-logind[1133]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:09:23.696000 audit[2687]: CRED_DISP pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.701620 systemd-logind[1133]: Removed session 14. Oct 2 20:09:23.704088 kernel: audit: type=1106 audit(1696277363.696:1143): pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.704148 kernel: audit: type=1104 audit(1696277363.696:1144): pid=2687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:23.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.7:22-10.0.0.1:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:33.702144 systemd[1]: Started sshd@14-10.0.0.7:22-10.0.0.1:38954.service. Oct 2 20:09:33.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.7:22-10.0.0.1:38954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:33.702988 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:33.703039 kernel: audit: type=1130 audit(1696277373.700:1146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.7:22-10.0.0.1:38954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:33.743000 audit[2704]: USER_ACCT pid=2704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.745846 sshd[2704]: Accepted publickey for core from 10.0.0.1 port 38954 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:33.746764 sshd[2704]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:33.745000 audit[2704]: CRED_ACQ pid=2704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.751726 kernel: audit: type=1101 audit(1696277373.743:1147): pid=2704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.751790 kernel: audit: type=1103 audit(1696277373.745:1148): pid=2704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.754101 kernel: audit: type=1006 audit(1696277373.745:1149): pid=2704 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:09:33.745000 audit[2704]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8ce54d0 a2=3 a3=1 items=0 ppid=1 pid=2704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:33.757620 kernel: audit: type=1300 audit(1696277373.745:1149): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8ce54d0 a2=3 a3=1 items=0 ppid=1 pid=2704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:33.745000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:33.759900 kernel: audit: type=1327 audit(1696277373.745:1149): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:33.760457 systemd-logind[1133]: New session 15 of user core. Oct 2 20:09:33.760938 systemd[1]: Started session-15.scope. Oct 2 20:09:33.763000 audit[2704]: USER_START pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.765000 audit[2706]: CRED_ACQ pid=2706 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.771661 kernel: audit: type=1105 audit(1696277373.763:1150): pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.771728 kernel: audit: type=1103 audit(1696277373.765:1151): pid=2706 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.874958 sshd[2704]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:33.874000 audit[2704]: USER_END pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.877854 systemd-logind[1133]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:09:33.877998 systemd[1]: sshd@14-10.0.0.7:22-10.0.0.1:38954.service: Deactivated successfully. Oct 2 20:09:33.878728 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:09:33.879480 systemd-logind[1133]: Removed session 15. Oct 2 20:09:33.874000 audit[2704]: CRED_DISP pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.882273 kernel: audit: type=1106 audit(1696277373.874:1152): pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.882317 kernel: audit: type=1104 audit(1696277373.874:1153): pid=2704 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:33.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.7:22-10.0.0.1:38954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:38.484957 kubelet[2026]: E1002 20:09:38.484916 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:38.487038 env[1143]: time="2023-10-02T20:09:38.486990967Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:09:38.504879 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4094149044.mount: Deactivated successfully. Oct 2 20:09:38.509770 env[1143]: time="2023-10-02T20:09:38.509662186Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" Oct 2 20:09:38.510016 env[1143]: time="2023-10-02T20:09:38.509987722Z" level=info msg="StartContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" Oct 2 20:09:38.525149 systemd[1]: Started cri-containerd-475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a.scope. Oct 2 20:09:38.542916 systemd[1]: cri-containerd-475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a.scope: Deactivated successfully. Oct 2 20:09:38.552900 env[1143]: time="2023-10-02T20:09:38.552849076Z" level=info msg="shim disconnected" id=475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a Oct 2 20:09:38.553105 env[1143]: time="2023-10-02T20:09:38.553085967Z" level=warning msg="cleaning up after shim disconnected" id=475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a namespace=k8s.io Oct 2 20:09:38.553231 env[1143]: time="2023-10-02T20:09:38.553215134Z" level=info msg="cleaning up dead shim" Oct 2 20:09:38.561441 env[1143]: time="2023-10-02T20:09:38.561397785Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2742 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:38.561813 env[1143]: time="2023-10-02T20:09:38.561758083Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:09:38.562029 env[1143]: time="2023-10-02T20:09:38.561980574Z" level=error msg="Failed to pipe stdout of container \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" error="reading from a closed fifo" Oct 2 20:09:38.562082 env[1143]: time="2023-10-02T20:09:38.562030377Z" level=error msg="Failed to pipe stderr of container \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" error="reading from a closed fifo" Oct 2 20:09:38.563464 env[1143]: time="2023-10-02T20:09:38.563413806Z" level=error msg="StartContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:38.563762 kubelet[2026]: E1002 20:09:38.563732 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a" Oct 2 20:09:38.563862 kubelet[2026]: E1002 20:09:38.563842 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:38.563862 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:38.563862 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:09:38.563862 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:38.564012 kubelet[2026]: E1002 20:09:38.563880 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:38.718953 kubelet[2026]: I1002 20:09:38.718922 2026 scope.go:115] "RemoveContainer" containerID="3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2" Oct 2 20:09:38.719266 kubelet[2026]: I1002 20:09:38.719246 2026 scope.go:115] "RemoveContainer" containerID="3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2" Oct 2 20:09:38.721690 env[1143]: time="2023-10-02T20:09:38.721655555Z" level=info msg="RemoveContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" Oct 2 20:09:38.722427 env[1143]: time="2023-10-02T20:09:38.722392072Z" level=info msg="RemoveContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\"" Oct 2 20:09:38.722505 env[1143]: time="2023-10-02T20:09:38.722472356Z" level=error msg="RemoveContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\" failed" error="failed to set removing state for container \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\": container is already in removing state" Oct 2 20:09:38.722882 kubelet[2026]: E1002 20:09:38.722870 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\": container is already in removing state" containerID="3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2" Oct 2 20:09:38.722980 kubelet[2026]: E1002 20:09:38.722969 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2": container is already in removing state; Skipping pod "cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)" Oct 2 20:09:38.723093 kubelet[2026]: E1002 20:09:38.723082 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:38.723389 kubelet[2026]: E1002 20:09:38.723373 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:38.752302 env[1143]: time="2023-10-02T20:09:38.751544897Z" level=info msg="RemoveContainer for \"3f4a6614956798128d2a792617773584180aa1b3e2606ba8f72ecc5527c3d0c2\" returns successfully" Oct 2 20:09:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.239941 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:39.240000 kernel: audit: type=1400 audit(1696277379.238:1155): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.245662 kernel: audit: type=1400 audit(1696277379.238:1157): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.245711 kernel: audit: type=1400 audit(1696277379.238:1156): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003cdeb10 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.252319 kernel: audit: type=1300 audit(1696277379.238:1156): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003cdeb10 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.252431 kernel: audit: type=1300 audit(1696277379.238:1157): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4004109cb0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4004109cb0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.259231 kernel: audit: type=1327 audit(1696277379.238:1156): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.259275 kernel: audit: type=1327 audit(1696277379.238:1157): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008c83820 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.266599 kernel: audit: type=1300 audit(1696277379.238:1155): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008c83820 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.266683 kernel: audit: type=1327 audit(1696277379.238:1155): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.245000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.272624 kernel: audit: type=1400 audit(1696277379.245:1158): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.245000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004109e00 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.245000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.245000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008c83840 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.249000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.249000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003d3e7e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:09:39.249000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:09:39.502174 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a-rootfs.mount: Deactivated successfully. Oct 2 20:09:39.618000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.618000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:39.618000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400236a020 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:39.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:39.618000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001ef10b0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:39.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:41.658070 kubelet[2026]: W1002 20:09:41.658030 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a.scope WatchSource:0}: task 475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a not found: not found Oct 2 20:09:42.482860 kubelet[2026]: E1002 20:09:42.482825 2026 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:09:42.543043 kubelet[2026]: E1002 20:09:42.543020 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:43.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.7:22-10.0.0.1:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:43.879871 systemd[1]: Started sshd@15-10.0.0.7:22-10.0.0.1:37292.service. Oct 2 20:09:43.919000 audit[2758]: USER_ACCT pid=2758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:43.919743 sshd[2758]: Accepted publickey for core from 10.0.0.1 port 37292 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:43.920000 audit[2758]: CRED_ACQ pid=2758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:43.920000 audit[2758]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd8072c0 a2=3 a3=1 items=0 ppid=1 pid=2758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:43.920000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:43.920802 sshd[2758]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:43.923876 systemd-logind[1133]: New session 16 of user core. Oct 2 20:09:43.924747 systemd[1]: Started session-16.scope. Oct 2 20:09:43.927000 audit[2758]: USER_START pid=2758 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:43.928000 audit[2760]: CRED_ACQ pid=2760 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:44.034622 sshd[2758]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:44.034000 audit[2758]: USER_END pid=2758 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:44.035000 audit[2758]: CRED_DISP pid=2758 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:44.037126 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:09:44.037694 systemd-logind[1133]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:09:44.037843 systemd[1]: sshd@15-10.0.0.7:22-10.0.0.1:37292.service: Deactivated successfully. Oct 2 20:09:44.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.7:22-10.0.0.1:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:44.038757 systemd-logind[1133]: Removed session 16. Oct 2 20:09:47.544806 kubelet[2026]: E1002 20:09:47.544772 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:52.546348 kubelet[2026]: E1002 20:09:52.546319 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:53.484666 kubelet[2026]: E1002 20:09:53.484633 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:09:53.485095 kubelet[2026]: E1002 20:09:53.485076 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:09:54.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:45082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.039896 systemd[1]: Started sshd@16-10.0.0.7:22-10.0.0.1:45082.service. Oct 2 20:09:54.040867 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:09:54.040916 kernel: audit: type=1130 audit(1696277394.038:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:45082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.077000 audit[2772]: USER_ACCT pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.079562 sshd[2772]: Accepted publickey for core from 10.0.0.1 port 45082 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:54.080629 sshd[2772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:54.078000 audit[2772]: CRED_ACQ pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.084911 systemd[1]: Started session-17.scope. Oct 2 20:09:54.085438 kernel: audit: type=1101 audit(1696277394.077:1173): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.085504 kernel: audit: type=1103 audit(1696277394.078:1174): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.085528 kernel: audit: type=1006 audit(1696277394.078:1175): pid=2772 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:09:54.086323 systemd-logind[1133]: New session 17 of user core. Oct 2 20:09:54.087212 kernel: audit: type=1300 audit(1696277394.078:1175): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4f78520 a2=3 a3=1 items=0 ppid=1 pid=2772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.078000 audit[2772]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4f78520 a2=3 a3=1 items=0 ppid=1 pid=2772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.078000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.091587 kernel: audit: type=1327 audit(1696277394.078:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.091649 kernel: audit: type=1105 audit(1696277394.089:1176): pid=2772 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.089000 audit[2772]: USER_START pid=2772 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.091000 audit[2774]: CRED_ACQ pid=2774 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.097662 kernel: audit: type=1103 audit(1696277394.091:1177): pid=2774 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.201508 sshd[2772]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:54.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.7:22-10.0.0.1:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.204725 systemd[1]: Started sshd@17-10.0.0.7:22-10.0.0.1:45086.service. Oct 2 20:09:54.207337 systemd-logind[1133]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:09:54.207456 systemd[1]: sshd@16-10.0.0.7:22-10.0.0.1:45082.service: Deactivated successfully. Oct 2 20:09:54.204000 audit[2772]: USER_END pid=2772 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.208136 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:09:54.209028 systemd-logind[1133]: Removed session 17. Oct 2 20:09:54.211084 kernel: audit: type=1130 audit(1696277394.203:1178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.7:22-10.0.0.1:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.211149 kernel: audit: type=1106 audit(1696277394.204:1179): pid=2772 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.204000 audit[2772]: CRED_DISP pid=2772 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.7:22-10.0.0.1:45082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.242000 audit[2785]: USER_ACCT pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.244144 sshd[2785]: Accepted publickey for core from 10.0.0.1 port 45086 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:54.243000 audit[2785]: CRED_ACQ pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.243000 audit[2785]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8c95cc0 a2=3 a3=1 items=0 ppid=1 pid=2785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.243000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.245680 sshd[2785]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:54.248936 systemd-logind[1133]: New session 18 of user core. Oct 2 20:09:54.249432 systemd[1]: Started session-18.scope. Oct 2 20:09:54.251000 audit[2785]: USER_START pid=2785 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.252000 audit[2788]: CRED_ACQ pid=2788 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008b5520 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400236ad80 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:54.846000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:54.846000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000e43a80 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:54.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:54.847000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:54.847000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400236aea0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:09:54.847000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:54.923041 sshd[2785]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:54.923000 audit[2785]: USER_END pid=2785 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.923000 audit[2785]: CRED_DISP pid=2785 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.927150 systemd[1]: Started sshd@18-10.0.0.7:22-10.0.0.1:45096.service. Oct 2 20:09:54.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.7:22-10.0.0.1:45096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.936843 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:09:54.937566 systemd[1]: sshd@17-10.0.0.7:22-10.0.0.1:45086.service: Deactivated successfully. Oct 2 20:09:54.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.7:22-10.0.0.1:45086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.938686 systemd-logind[1133]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:09:54.943028 systemd-logind[1133]: Removed session 18. Oct 2 20:09:54.968000 audit[2796]: USER_ACCT pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.970513 sshd[2796]: Accepted publickey for core from 10.0.0.1 port 45096 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:09:54.969000 audit[2796]: CRED_ACQ pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.969000 audit[2796]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcadc3e20 a2=3 a3=1 items=0 ppid=1 pid=2796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.969000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.971799 sshd[2796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:54.974963 systemd-logind[1133]: New session 19 of user core. Oct 2 20:09:54.975864 systemd[1]: Started session-19.scope. Oct 2 20:09:54.977000 audit[2796]: USER_START pid=2796 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:54.979000 audit[2799]: CRED_ACQ pid=2799 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:55.087496 sshd[2796]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:55.086000 audit[2796]: USER_END pid=2796 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:55.087000 audit[2796]: CRED_DISP pid=2796 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:09:55.090117 systemd-logind[1133]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:09:55.090265 systemd[1]: sshd@18-10.0.0.7:22-10.0.0.1:45096.service: Deactivated successfully. Oct 2 20:09:55.091000 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:09:55.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.7:22-10.0.0.1:45096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.091738 systemd-logind[1133]: Removed session 19. Oct 2 20:09:57.547763 kubelet[2026]: E1002 20:09:57.547715 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:02.549012 kubelet[2026]: E1002 20:10:02.548983 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:03.484989 kubelet[2026]: E1002 20:10:03.484956 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:05.092973 systemd[1]: Started sshd@19-10.0.0.7:22-10.0.0.1:50250.service. Oct 2 20:10:05.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:50250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:05.094264 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 2 20:10:05.094322 kernel: audit: type=1130 audit(1696277405.091:1203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:50250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:05.131000 audit[2812]: USER_ACCT pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.132934 sshd[2812]: Accepted publickey for core from 10.0.0.1 port 50250 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:05.134320 sshd[2812]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:05.132000 audit[2812]: CRED_ACQ pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.138678 kernel: audit: type=1101 audit(1696277405.131:1204): pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.138738 kernel: audit: type=1103 audit(1696277405.132:1205): pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.140579 kernel: audit: type=1006 audit(1696277405.132:1206): pid=2812 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:10:05.132000 audit[2812]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc39c6f90 a2=3 a3=1 items=0 ppid=1 pid=2812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:05.143751 kernel: audit: type=1300 audit(1696277405.132:1206): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc39c6f90 a2=3 a3=1 items=0 ppid=1 pid=2812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:05.132000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:05.144993 kernel: audit: type=1327 audit(1696277405.132:1206): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:05.147386 systemd[1]: Started session-20.scope. Oct 2 20:10:05.147606 systemd-logind[1133]: New session 20 of user core. Oct 2 20:10:05.150000 audit[2812]: USER_START pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.151000 audit[2814]: CRED_ACQ pid=2814 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.157700 kernel: audit: type=1105 audit(1696277405.150:1207): pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.157770 kernel: audit: type=1103 audit(1696277405.151:1208): pid=2814 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.261764 sshd[2812]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:05.261000 audit[2812]: USER_END pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.264249 systemd[1]: sshd@19-10.0.0.7:22-10.0.0.1:50250.service: Deactivated successfully. Oct 2 20:10:05.264978 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:10:05.261000 audit[2812]: CRED_DISP pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.268936 kernel: audit: type=1106 audit(1696277405.261:1209): pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.268983 kernel: audit: type=1104 audit(1696277405.261:1210): pid=2812 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:05.268986 systemd-logind[1133]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:10:05.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.7:22-10.0.0.1:50250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:05.269657 systemd-logind[1133]: Removed session 20. Oct 2 20:10:06.484157 kubelet[2026]: E1002 20:10:06.484118 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:06.484501 kubelet[2026]: E1002 20:10:06.484370 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:10:07.550834 kubelet[2026]: E1002 20:10:07.550796 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:09.484411 kubelet[2026]: E1002 20:10:09.484376 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:12.551591 kubelet[2026]: E1002 20:10:12.551558 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:14.484005 kubelet[2026]: E1002 20:10:14.483972 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:15.267934 systemd[1]: Started sshd@20-10.0.0.7:22-10.0.0.1:55158.service. Oct 2 20:10:15.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:55158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.268765 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:15.268823 kernel: audit: type=1130 audit(1696277415.266:1212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:55158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.305000 audit[2825]: USER_ACCT pid=2825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.307568 sshd[2825]: Accepted publickey for core from 10.0.0.1 port 55158 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:15.309166 sshd[2825]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:15.307000 audit[2825]: CRED_ACQ pid=2825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.313172 kernel: audit: type=1101 audit(1696277415.305:1213): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.313244 kernel: audit: type=1103 audit(1696277415.307:1214): pid=2825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.313268 kernel: audit: type=1006 audit(1696277415.307:1215): pid=2825 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:10:15.314015 systemd-logind[1133]: New session 21 of user core. Oct 2 20:10:15.314465 systemd[1]: Started session-21.scope. Oct 2 20:10:15.307000 audit[2825]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd27ef9a0 a2=3 a3=1 items=0 ppid=1 pid=2825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:15.317920 kernel: audit: type=1300 audit(1696277415.307:1215): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd27ef9a0 a2=3 a3=1 items=0 ppid=1 pid=2825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:15.317978 kernel: audit: type=1327 audit(1696277415.307:1215): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:15.307000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:15.319864 kernel: audit: type=1105 audit(1696277415.316:1216): pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.316000 audit[2825]: USER_START pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.318000 audit[2827]: CRED_ACQ pid=2827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.324861 kernel: audit: type=1103 audit(1696277415.318:1217): pid=2827 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.428531 sshd[2825]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:15.427000 audit[2825]: USER_END pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.430994 systemd[1]: sshd@20-10.0.0.7:22-10.0.0.1:55158.service: Deactivated successfully. Oct 2 20:10:15.431746 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:10:15.432274 systemd-logind[1133]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:10:15.428000 audit[2825]: CRED_DISP pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.432917 systemd-logind[1133]: Removed session 21. Oct 2 20:10:15.435542 kernel: audit: type=1106 audit(1696277415.427:1218): pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.435598 kernel: audit: type=1104 audit(1696277415.428:1219): pid=2825 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:15.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.7:22-10.0.0.1:55158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:17.484612 kubelet[2026]: E1002 20:10:17.484582 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:17.485220 kubelet[2026]: E1002 20:10:17.485198 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:10:17.552960 kubelet[2026]: E1002 20:10:17.552925 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:22.554289 kubelet[2026]: E1002 20:10:22.554235 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:25.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:50668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.434086 systemd[1]: Started sshd@21-10.0.0.7:22-10.0.0.1:50668.service. Oct 2 20:10:25.434943 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:25.434984 kernel: audit: type=1130 audit(1696277425.433:1221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:50668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.473000 audit[2838]: USER_ACCT pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.474376 sshd[2838]: Accepted publickey for core from 10.0.0.1 port 50668 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:25.475592 sshd[2838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:25.474000 audit[2838]: CRED_ACQ pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.479555 systemd-logind[1133]: New session 22 of user core. Oct 2 20:10:25.480345 kernel: audit: type=1101 audit(1696277425.473:1222): pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.480412 kernel: audit: type=1103 audit(1696277425.474:1223): pid=2838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.480449 kernel: audit: type=1006 audit(1696277425.474:1224): pid=2838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:10:25.480331 systemd[1]: Started session-22.scope. Oct 2 20:10:25.474000 audit[2838]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd777c960 a2=3 a3=1 items=0 ppid=1 pid=2838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:25.485302 kernel: audit: type=1300 audit(1696277425.474:1224): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd777c960 a2=3 a3=1 items=0 ppid=1 pid=2838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:25.485384 kernel: audit: type=1327 audit(1696277425.474:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:25.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:25.486473 kernel: audit: type=1105 audit(1696277425.483:1225): pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.483000 audit[2838]: USER_START pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.485000 audit[2840]: CRED_ACQ pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.492457 kernel: audit: type=1103 audit(1696277425.485:1226): pid=2840 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.597358 sshd[2838]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:25.597000 audit[2838]: USER_END pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.599615 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:10:25.600185 systemd-logind[1133]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:10:25.600301 systemd[1]: sshd@21-10.0.0.7:22-10.0.0.1:50668.service: Deactivated successfully. Oct 2 20:10:25.597000 audit[2838]: CRED_DISP pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.601805 systemd-logind[1133]: Removed session 22. Oct 2 20:10:25.604598 kernel: audit: type=1106 audit(1696277425.597:1227): pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.604682 kernel: audit: type=1104 audit(1696277425.597:1228): pid=2838 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:25.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.7:22-10.0.0.1:50668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.484503 kubelet[2026]: E1002 20:10:26.484223 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:27.484380 kubelet[2026]: E1002 20:10:27.484338 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:27.555741 kubelet[2026]: E1002 20:10:27.555695 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:32.485026 kubelet[2026]: E1002 20:10:32.484978 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:32.485891 kubelet[2026]: E1002 20:10:32.485867 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:10:32.556536 kubelet[2026]: E1002 20:10:32.556510 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:35.601669 systemd[1]: Started sshd@22-10.0.0.7:22-10.0.0.1:59528.service. Oct 2 20:10:35.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.7:22-10.0.0.1:59528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:35.602793 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:35.602837 kernel: audit: type=1130 audit(1696277435.601:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.7:22-10.0.0.1:59528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:35.640000 audit[2853]: USER_ACCT pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.641198 sshd[2853]: Accepted publickey for core from 10.0.0.1 port 59528 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:35.642824 sshd[2853]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:35.642000 audit[2853]: CRED_ACQ pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.646960 kernel: audit: type=1101 audit(1696277435.640:1231): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.647026 kernel: audit: type=1103 audit(1696277435.642:1232): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.647053 kernel: audit: type=1006 audit(1696277435.642:1233): pid=2853 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:10:35.642000 audit[2853]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff71fe440 a2=3 a3=1 items=0 ppid=1 pid=2853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:35.651876 kernel: audit: type=1300 audit(1696277435.642:1233): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff71fe440 a2=3 a3=1 items=0 ppid=1 pid=2853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:35.642000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:35.653000 kernel: audit: type=1327 audit(1696277435.642:1233): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:35.655945 systemd-logind[1133]: New session 23 of user core. Oct 2 20:10:35.656837 systemd[1]: Started session-23.scope. Oct 2 20:10:35.660000 audit[2853]: USER_START pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.662000 audit[2855]: CRED_ACQ pid=2855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.667262 kernel: audit: type=1105 audit(1696277435.660:1234): pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.667332 kernel: audit: type=1103 audit(1696277435.662:1235): pid=2855 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.797196 sshd[2853]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:35.797000 audit[2853]: USER_END pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.799575 systemd[1]: sshd@22-10.0.0.7:22-10.0.0.1:59528.service: Deactivated successfully. Oct 2 20:10:35.800327 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:10:35.797000 audit[2853]: CRED_DISP pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.804512 kernel: audit: type=1106 audit(1696277435.797:1236): pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.804587 kernel: audit: type=1104 audit(1696277435.797:1237): pid=2853 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:35.804563 systemd-logind[1133]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:10:35.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.7:22-10.0.0.1:59528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:35.805381 systemd-logind[1133]: Removed session 23. Oct 2 20:10:37.557727 kubelet[2026]: E1002 20:10:37.557684 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=401082fad0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010ba4090 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.240000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.240000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e4514e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.245000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.245000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400e46ed00 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.245000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.245000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=401082fb30 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.249000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.249000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401082fb90 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:10:39.249000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:10:39.618000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.618000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:39.618000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a80c40 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:39.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:39.618000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400172df20 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:39.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:42.558360 kubelet[2026]: E1002 20:10:42.558319 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:45.802882 systemd[1]: Started sshd@23-10.0.0.7:22-10.0.0.1:44926.service. Oct 2 20:10:45.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:44926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:45.803923 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:10:45.804003 kernel: audit: type=1130 audit(1696277445.801:1247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:44926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:45.841000 audit[2868]: USER_ACCT pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.843401 sshd[2868]: Accepted publickey for core from 10.0.0.1 port 44926 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:45.845496 sshd[2868]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:45.844000 audit[2868]: CRED_ACQ pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.849540 kernel: audit: type=1101 audit(1696277445.841:1248): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.849599 kernel: audit: type=1103 audit(1696277445.844:1249): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.849634 kernel: audit: type=1006 audit(1696277445.844:1250): pid=2868 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:10:45.850649 systemd-logind[1133]: New session 24 of user core. Oct 2 20:10:45.851139 systemd[1]: Started session-24.scope. Oct 2 20:10:45.851341 kernel: audit: type=1300 audit(1696277445.844:1250): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcdeba90 a2=3 a3=1 items=0 ppid=1 pid=2868 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:45.844000 audit[2868]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcdeba90 a2=3 a3=1 items=0 ppid=1 pid=2868 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:45.844000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:45.855513 kernel: audit: type=1327 audit(1696277445.844:1250): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:45.855557 kernel: audit: type=1105 audit(1696277445.853:1251): pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.853000 audit[2868]: USER_START pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.855000 audit[2870]: CRED_ACQ pid=2870 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.861591 kernel: audit: type=1103 audit(1696277445.855:1252): pid=2870 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.975160 sshd[2868]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:45.974000 audit[2868]: USER_END pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.977553 systemd[1]: sshd@23-10.0.0.7:22-10.0.0.1:44926.service: Deactivated successfully. Oct 2 20:10:45.978478 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:10:45.979030 systemd-logind[1133]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:10:45.974000 audit[2868]: CRED_DISP pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.979795 systemd-logind[1133]: Removed session 24. Oct 2 20:10:45.982441 kernel: audit: type=1106 audit(1696277445.974:1253): pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.982519 kernel: audit: type=1104 audit(1696277445.974:1254): pid=2868 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:45.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.7:22-10.0.0.1:44926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.484614 kubelet[2026]: E1002 20:10:47.484585 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:10:47.485181 kubelet[2026]: E1002 20:10:47.485162 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:10:47.559330 kubelet[2026]: E1002 20:10:47.559300 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:52.560063 kubelet[2026]: E1002 20:10:52.560018 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:54.848000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.849886 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:54.849971 kernel: audit: type=1400 audit(1696277454.848:1256): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.848000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.857024 kernel: audit: type=1400 audit(1696277454.848:1257): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.857094 kernel: audit: type=1300 audit(1696277454.848:1257): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ff2700 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.848000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000ff2700 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.848000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.864069 kernel: audit: type=1327 audit(1696277454.848:1257): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.864146 kernel: audit: type=1400 audit(1696277454.848:1258): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.848000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.848000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010104c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.872277 kernel: audit: type=1300 audit(1696277454.848:1258): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010104c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.848000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.875958 kernel: audit: type=1327 audit(1696277454.848:1258): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.848000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f1e9c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.880194 kernel: audit: type=1300 audit(1696277454.848:1256): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f1e9c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.880262 kernel: audit: type=1327 audit(1696277454.848:1256): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.848000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:54.883534 kernel: audit: type=1400 audit(1696277454.849:1259): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.849000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:54.849000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010106c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:10:54.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:55.979756 systemd[1]: Started sshd@24-10.0.0.7:22-10.0.0.1:49648.service. Oct 2 20:10:55.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.7:22-10.0.0.1:49648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:56.018000 audit[2881]: USER_ACCT pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.019960 sshd[2881]: Accepted publickey for core from 10.0.0.1 port 49648 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:10:56.019000 audit[2881]: CRED_ACQ pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.019000 audit[2881]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff07a09d0 a2=3 a3=1 items=0 ppid=1 pid=2881 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:56.019000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:56.021555 sshd[2881]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:56.025892 systemd-logind[1133]: New session 25 of user core. Oct 2 20:10:56.026867 systemd[1]: Started session-25.scope. Oct 2 20:10:56.031000 audit[2881]: USER_START pid=2881 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.032000 audit[2883]: CRED_ACQ pid=2883 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.147975 sshd[2881]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:56.147000 audit[2881]: USER_END pid=2881 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.147000 audit[2881]: CRED_DISP pid=2881 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:10:56.150943 systemd[1]: sshd@24-10.0.0.7:22-10.0.0.1:49648.service: Deactivated successfully. Oct 2 20:10:56.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.7:22-10.0.0.1:49648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:56.151752 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:10:56.152402 systemd-logind[1133]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:10:56.153081 systemd-logind[1133]: Removed session 25. Oct 2 20:10:57.561869 kubelet[2026]: E1002 20:10:57.561824 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:01.484617 kubelet[2026]: E1002 20:11:01.484590 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:01.487186 env[1143]: time="2023-10-02T20:11:01.487146844Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:11:01.496062 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1047294528.mount: Deactivated successfully. Oct 2 20:11:01.498180 env[1143]: time="2023-10-02T20:11:01.498144163Z" level=info msg="CreateContainer within sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\"" Oct 2 20:11:01.498800 env[1143]: time="2023-10-02T20:11:01.498770635Z" level=info msg="StartContainer for \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\"" Oct 2 20:11:01.517205 systemd[1]: Started cri-containerd-19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4.scope. Oct 2 20:11:01.530697 systemd[1]: cri-containerd-19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4.scope: Deactivated successfully. Oct 2 20:11:01.536543 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4-rootfs.mount: Deactivated successfully. Oct 2 20:11:01.553010 env[1143]: time="2023-10-02T20:11:01.552962611Z" level=info msg="shim disconnected" id=19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4 Oct 2 20:11:01.553224 env[1143]: time="2023-10-02T20:11:01.553205593Z" level=warning msg="cleaning up after shim disconnected" id=19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4 namespace=k8s.io Oct 2 20:11:01.553293 env[1143]: time="2023-10-02T20:11:01.553278947Z" level=info msg="cleaning up dead shim" Oct 2 20:11:01.561705 env[1143]: time="2023-10-02T20:11:01.561661586Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2918 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:01.562098 env[1143]: time="2023-10-02T20:11:01.562042357Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:11:01.562527 env[1143]: time="2023-10-02T20:11:01.562464965Z" level=error msg="Failed to pipe stdout of container \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\"" error="reading from a closed fifo" Oct 2 20:11:01.562527 env[1143]: time="2023-10-02T20:11:01.562473004Z" level=error msg="Failed to pipe stderr of container \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\"" error="reading from a closed fifo" Oct 2 20:11:01.565019 env[1143]: time="2023-10-02T20:11:01.564976813Z" level=error msg="StartContainer for \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:01.565223 kubelet[2026]: E1002 20:11:01.565202 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4" Oct 2 20:11:01.565319 kubelet[2026]: E1002 20:11:01.565303 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:01.565319 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:01.565319 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:11:01.565319 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gp9nj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:01.565480 kubelet[2026]: E1002 20:11:01.565341 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:11:01.856936 kubelet[2026]: I1002 20:11:01.856828 2026 scope.go:115] "RemoveContainer" containerID="475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a" Oct 2 20:11:01.857163 kubelet[2026]: I1002 20:11:01.857136 2026 scope.go:115] "RemoveContainer" containerID="475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a" Oct 2 20:11:01.858184 env[1143]: time="2023-10-02T20:11:01.858151276Z" level=info msg="RemoveContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" Oct 2 20:11:01.859197 env[1143]: time="2023-10-02T20:11:01.858904218Z" level=info msg="RemoveContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\"" Oct 2 20:11:01.859197 env[1143]: time="2023-10-02T20:11:01.859019049Z" level=error msg="RemoveContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\" failed" error="failed to set removing state for container \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\": container is already in removing state" Oct 2 20:11:01.859888 kubelet[2026]: E1002 20:11:01.859823 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\": container is already in removing state" containerID="475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a" Oct 2 20:11:01.859888 kubelet[2026]: E1002 20:11:01.859856 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a": container is already in removing state; Skipping pod "cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)" Oct 2 20:11:01.860625 kubelet[2026]: E1002 20:11:01.860091 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:01.860625 kubelet[2026]: E1002 20:11:01.860390 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:11:01.861789 env[1143]: time="2023-10-02T20:11:01.861757360Z" level=info msg="RemoveContainer for \"475a118fda1fc57b2dec0d775d5a689ee773d640a08efae57257bf35d5a2778a\" returns successfully" Oct 2 20:11:02.563137 kubelet[2026]: E1002 20:11:02.563100 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:04.656284 kubelet[2026]: W1002 20:11:04.656244 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice/cri-containerd-19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4.scope WatchSource:0}: task 19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4 not found: not found Oct 2 20:11:06.151615 systemd[1]: Started sshd@25-10.0.0.7:22-10.0.0.1:58882.service. Oct 2 20:11:06.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:58882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:06.155014 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:11:06.155091 kernel: audit: type=1130 audit(1696277466.150:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:58882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:06.189000 audit[2932]: USER_ACCT pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.191006 sshd[2932]: Accepted publickey for core from 10.0.0.1 port 58882 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:06.192559 sshd[2932]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:06.190000 audit[2932]: CRED_ACQ pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.197148 kernel: audit: type=1101 audit(1696277466.189:1270): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.197228 kernel: audit: type=1103 audit(1696277466.190:1271): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.197256 kernel: audit: type=1006 audit(1696277466.190:1272): pid=2932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:11:06.196843 systemd[1]: Started session-26.scope. Oct 2 20:11:06.197447 systemd-logind[1133]: New session 26 of user core. Oct 2 20:11:06.190000 audit[2932]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd15b39b0 a2=3 a3=1 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:06.201574 kernel: audit: type=1300 audit(1696277466.190:1272): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd15b39b0 a2=3 a3=1 items=0 ppid=1 pid=2932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:06.201636 kernel: audit: type=1327 audit(1696277466.190:1272): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:06.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:06.202788 kernel: audit: type=1105 audit(1696277466.200:1273): pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.200000 audit[2932]: USER_START pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.201000 audit[2934]: CRED_ACQ pid=2934 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.208608 kernel: audit: type=1103 audit(1696277466.201:1274): pid=2934 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.310918 sshd[2932]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:06.310000 audit[2932]: USER_END pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.313053 systemd[1]: sshd@25-10.0.0.7:22-10.0.0.1:58882.service: Deactivated successfully. Oct 2 20:11:06.313794 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:11:06.314324 systemd-logind[1133]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:11:06.314975 systemd-logind[1133]: Removed session 26. Oct 2 20:11:06.310000 audit[2932]: CRED_DISP pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.318403 kernel: audit: type=1106 audit(1696277466.310:1275): pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.318458 kernel: audit: type=1104 audit(1696277466.310:1276): pid=2932 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:06.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.7:22-10.0.0.1:58882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:07.564064 kubelet[2026]: E1002 20:11:07.564031 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:12.484679 kubelet[2026]: E1002 20:11:12.484642 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:12.564673 kubelet[2026]: E1002 20:11:12.564635 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:14.484492 kubelet[2026]: E1002 20:11:14.484460 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:14.485095 kubelet[2026]: E1002 20:11:14.485074 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6gcxl_kube-system(febda0fe-6a93-400d-8c56-0e02135cc29e)\"" pod="kube-system/cilium-6gcxl" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e Oct 2 20:11:16.313414 systemd[1]: Started sshd@26-10.0.0.7:22-10.0.0.1:60408.service. Oct 2 20:11:16.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:16.316882 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:11:16.317058 kernel: audit: type=1130 audit(1696277476.313:1278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:16.353000 audit[2945]: USER_ACCT pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.354204 sshd[2945]: Accepted publickey for core from 10.0.0.1 port 60408 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:16.355313 sshd[2945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:16.354000 audit[2945]: CRED_ACQ pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.358653 systemd-logind[1133]: New session 27 of user core. Oct 2 20:11:16.359588 systemd[1]: Started session-27.scope. Oct 2 20:11:16.360016 kernel: audit: type=1101 audit(1696277476.353:1279): pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.360070 kernel: audit: type=1103 audit(1696277476.354:1280): pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.360097 kernel: audit: type=1006 audit(1696277476.354:1281): pid=2945 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:11:16.354000 audit[2945]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9e80b00 a2=3 a3=1 items=0 ppid=1 pid=2945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:16.364928 kernel: audit: type=1300 audit(1696277476.354:1281): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9e80b00 a2=3 a3=1 items=0 ppid=1 pid=2945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:16.354000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:16.366134 kernel: audit: type=1327 audit(1696277476.354:1281): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:16.366177 kernel: audit: type=1105 audit(1696277476.362:1282): pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.362000 audit[2945]: USER_START pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.364000 audit[2947]: CRED_ACQ pid=2947 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.372022 kernel: audit: type=1103 audit(1696277476.364:1283): pid=2947 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.471857 sshd[2945]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:16.472000 audit[2945]: USER_END pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.474916 systemd-logind[1133]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:11:16.475088 systemd[1]: sshd@26-10.0.0.7:22-10.0.0.1:60408.service: Deactivated successfully. Oct 2 20:11:16.475855 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:11:16.472000 audit[2945]: CRED_DISP pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.476570 systemd-logind[1133]: Removed session 27. Oct 2 20:11:16.479271 kernel: audit: type=1106 audit(1696277476.472:1284): pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.479317 kernel: audit: type=1104 audit(1696277476.472:1285): pid=2945 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:16.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.7:22-10.0.0.1:60408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:17.565927 kubelet[2026]: E1002 20:11:17.565899 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:22.566526 kubelet[2026]: E1002 20:11:22.566497 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:24.484048 kubelet[2026]: E1002 20:11:24.484012 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:26.476720 systemd[1]: Started sshd@27-10.0.0.7:22-10.0.0.1:55118.service. Oct 2 20:11:26.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:55118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.477740 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:11:26.477787 kernel: audit: type=1130 audit(1696277486.475:1287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:55118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.484519 kubelet[2026]: E1002 20:11:26.484497 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:26.515000 audit[2958]: USER_ACCT pid=2958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.516917 sshd[2958]: Accepted publickey for core from 10.0.0.1 port 55118 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:26.518437 sshd[2958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:26.516000 audit[2958]: CRED_ACQ pid=2958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.522970 kernel: audit: type=1101 audit(1696277486.515:1288): pid=2958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.523035 kernel: audit: type=1103 audit(1696277486.516:1289): pid=2958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.523056 kernel: audit: type=1006 audit(1696277486.516:1290): pid=2958 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:11:26.516000 audit[2958]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdbff570 a2=3 a3=1 items=0 ppid=1 pid=2958 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:26.526954 systemd-logind[1133]: New session 28 of user core. Oct 2 20:11:26.527388 systemd[1]: Started session-28.scope. Oct 2 20:11:26.528030 kernel: audit: type=1300 audit(1696277486.516:1290): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdbff570 a2=3 a3=1 items=0 ppid=1 pid=2958 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:26.528118 kernel: audit: type=1327 audit(1696277486.516:1290): proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:26.516000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:26.530000 audit[2958]: USER_START pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.535481 kernel: audit: type=1105 audit(1696277486.530:1291): pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.535568 kernel: audit: type=1103 audit(1696277486.533:1292): pid=2960 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.533000 audit[2960]: CRED_ACQ pid=2960 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.646792 sshd[2958]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:26.647000 audit[2958]: USER_END pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.650706 systemd[1]: Started sshd@28-10.0.0.7:22-10.0.0.1:55128.service. Oct 2 20:11:26.651218 systemd[1]: sshd@27-10.0.0.7:22-10.0.0.1:55118.service: Deactivated successfully. Oct 2 20:11:26.651891 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:11:26.647000 audit[2958]: CRED_DISP pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.654867 systemd-logind[1133]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:11:26.655000 kernel: audit: type=1106 audit(1696277486.647:1293): pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.655034 kernel: audit: type=1104 audit(1696277486.647:1294): pid=2958 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.7:22-10.0.0.1:55128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.7:22-10.0.0.1:55118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.655726 systemd-logind[1133]: Removed session 28. Oct 2 20:11:26.690000 audit[2971]: USER_ACCT pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.692084 sshd[2971]: Accepted publickey for core from 10.0.0.1 port 55128 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:26.691000 audit[2971]: CRED_ACQ pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.691000 audit[2971]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec85c6c0 a2=3 a3=1 items=0 ppid=1 pid=2971 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:26.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:26.693555 sshd[2971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:26.698192 systemd[1]: Started session-29.scope. Oct 2 20:11:26.698562 systemd-logind[1133]: New session 29 of user core. Oct 2 20:11:26.701000 audit[2971]: USER_START pid=2971 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:26.702000 audit[2975]: CRED_ACQ pid=2975 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:27.567945 kubelet[2026]: E1002 20:11:27.567912 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:27.869784 update_engine[1135]: I1002 20:11:27.869665 1135 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:11:27.869784 update_engine[1135]: I1002 20:11:27.869704 1135 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:11:27.870311 update_engine[1135]: I1002 20:11:27.870294 1135 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:11:27.870653 update_engine[1135]: I1002 20:11:27.870621 1135 omaha_request_params.cc:62] Current group set to lts Oct 2 20:11:27.870774 update_engine[1135]: I1002 20:11:27.870754 1135 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:11:27.870774 update_engine[1135]: I1002 20:11:27.870769 1135 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:11:27.870849 update_engine[1135]: I1002 20:11:27.870783 1135 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:11:27.870849 update_engine[1135]: I1002 20:11:27.870805 1135 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:11:27.871143 update_engine[1135]: I1002 20:11:27.871124 1135 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:11:27.871143 update_engine[1135]: I1002 20:11:27.871138 1135 omaha_request_action.cc:269] Request: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: Oct 2 20:11:27.871143 update_engine[1135]: I1002 20:11:27.871143 1135 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:11:27.872159 update_engine[1135]: I1002 20:11:27.872133 1135 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:11:27.872300 update_engine[1135]: I1002 20:11:27.872287 1135 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:11:27.872738 locksmithd[1175]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:11:28.867165 env[1143]: time="2023-10-02T20:11:28.867107535Z" level=info msg="StopPodSandbox for \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\"" Oct 2 20:11:28.867503 env[1143]: time="2023-10-02T20:11:28.867184933Z" level=info msg="Container to stop \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:28.868805 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d-shm.mount: Deactivated successfully. Oct 2 20:11:28.880201 env[1143]: time="2023-10-02T20:11:28.880148264Z" level=info msg="StopContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" with timeout 30 (s)" Oct 2 20:11:28.880000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:11:28.881394 systemd[1]: cri-containerd-4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d.scope: Deactivated successfully. Oct 2 20:11:28.883036 env[1143]: time="2023-10-02T20:11:28.883006227Z" level=info msg="Stop container \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" with signal terminated" Oct 2 20:11:28.885000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:11:28.896000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:11:28.897630 systemd[1]: cri-containerd-e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e.scope: Deactivated successfully. Oct 2 20:11:28.902000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:11:28.918064 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e-rootfs.mount: Deactivated successfully. Oct 2 20:11:28.923899 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d-rootfs.mount: Deactivated successfully. Oct 2 20:11:28.932112 env[1143]: time="2023-10-02T20:11:28.932040424Z" level=info msg="shim disconnected" id=e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e Oct 2 20:11:28.932112 env[1143]: time="2023-10-02T20:11:28.932090342Z" level=warning msg="cleaning up after shim disconnected" id=e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e namespace=k8s.io Oct 2 20:11:28.932112 env[1143]: time="2023-10-02T20:11:28.932100302Z" level=info msg="cleaning up dead shim" Oct 2 20:11:28.932650 env[1143]: time="2023-10-02T20:11:28.932608648Z" level=info msg="shim disconnected" id=4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d Oct 2 20:11:28.932650 env[1143]: time="2023-10-02T20:11:28.932644527Z" level=warning msg="cleaning up after shim disconnected" id=4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d namespace=k8s.io Oct 2 20:11:28.932723 env[1143]: time="2023-10-02T20:11:28.932653607Z" level=info msg="cleaning up dead shim" Oct 2 20:11:28.940204 env[1143]: time="2023-10-02T20:11:28.940154645Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3024 runtime=io.containerd.runc.v2\n" Oct 2 20:11:28.941473 env[1143]: time="2023-10-02T20:11:28.941446850Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3025 runtime=io.containerd.runc.v2\n" Oct 2 20:11:28.941714 env[1143]: time="2023-10-02T20:11:28.941672844Z" level=info msg="StopContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" returns successfully" Oct 2 20:11:28.942205 env[1143]: time="2023-10-02T20:11:28.942129072Z" level=info msg="StopPodSandbox for \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\"" Oct 2 20:11:28.942205 env[1143]: time="2023-10-02T20:11:28.942183470Z" level=info msg="Container to stop \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:28.942370 env[1143]: time="2023-10-02T20:11:28.942129392Z" level=info msg="TearDown network for sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" successfully" Oct 2 20:11:28.942370 env[1143]: time="2023-10-02T20:11:28.942351386Z" level=info msg="StopPodSandbox for \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" returns successfully" Oct 2 20:11:28.943506 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088-shm.mount: Deactivated successfully. Oct 2 20:11:28.955411 systemd[1]: cri-containerd-6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088.scope: Deactivated successfully. Oct 2 20:11:28.954000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:11:28.962000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:11:28.972307 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088-rootfs.mount: Deactivated successfully. Oct 2 20:11:28.977295 env[1143]: time="2023-10-02T20:11:28.977255324Z" level=info msg="shim disconnected" id=6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088 Oct 2 20:11:28.977295 env[1143]: time="2023-10-02T20:11:28.977295243Z" level=warning msg="cleaning up after shim disconnected" id=6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088 namespace=k8s.io Oct 2 20:11:28.977486 env[1143]: time="2023-10-02T20:11:28.977305043Z" level=info msg="cleaning up dead shim" Oct 2 20:11:28.985820 env[1143]: time="2023-10-02T20:11:28.985767974Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3068 runtime=io.containerd.runc.v2\n" Oct 2 20:11:28.986099 env[1143]: time="2023-10-02T20:11:28.986065646Z" level=info msg="TearDown network for sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" successfully" Oct 2 20:11:28.986099 env[1143]: time="2023-10-02T20:11:28.986091286Z" level=info msg="StopPodSandbox for \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" returns successfully" Oct 2 20:11:29.044023 update_engine[1135]: I1002 20:11:29.043979 1135 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:11:29.044386 update_engine[1135]: I1002 20:11:29.044237 1135 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:11:29.044470 update_engine[1135]: I1002 20:11:29.044399 1135 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:11:29.105492 kubelet[2026]: I1002 20:11:29.105449 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105492 kubelet[2026]: I1002 20:11:29.105491 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-hostproc\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105510 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-run\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105570 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-lib-modules\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105598 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-config-path\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105619 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-cgroup\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105636 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-net\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105657 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c731b288-564f-493a-a6a8-a7178d354df5-cilium-config-path\") pod \"c731b288-564f-493a-a6a8-a7178d354df5\" (UID: \"c731b288-564f-493a-a6a8-a7178d354df5\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105676 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cni-path\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105696 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-xtables-lock\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105730 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-bpf-maps\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105784 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105787 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-hostproc" (OuterVolumeSpecName: "hostproc") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105818 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105836 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105852 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.105893 kubelet[2026]: I1002 20:11:29.105874 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cni-path" (OuterVolumeSpecName: "cni-path") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106152 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gp9nj\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-kube-api-access-gp9nj\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106179 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wtdrn\" (UniqueName: \"kubernetes.io/projected/c731b288-564f-493a-a6a8-a7178d354df5-kube-api-access-wtdrn\") pod \"c731b288-564f-493a-a6a8-a7178d354df5\" (UID: \"c731b288-564f-493a-a6a8-a7178d354df5\") " Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106198 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-kernel\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106215 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-etc-cni-netd\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106296 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets\") pod \"febda0fe-6a93-400d-8c56-0e02135cc29e\" (UID: \"febda0fe-6a93-400d-8c56-0e02135cc29e\") " Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106330 2026 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106342 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106362 kubelet[2026]: I1002 20:11:29.106351 2026 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106619 kubelet[2026]: I1002 20:11:29.106368 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106619 kubelet[2026]: I1002 20:11:29.106454 2026 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106619 kubelet[2026]: I1002 20:11:29.106465 2026 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.106722 kubelet[2026]: W1002 20:11:29.106391 2026 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c731b288-564f-493a-a6a8-a7178d354df5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:11:29.106722 kubelet[2026]: W1002 20:11:29.106389 2026 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/febda0fe-6a93-400d-8c56-0e02135cc29e/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:11:29.106773 kubelet[2026]: I1002 20:11:29.106747 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.106803 kubelet[2026]: I1002 20:11:29.106780 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.107136 kubelet[2026]: I1002 20:11:29.107101 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.107136 kubelet[2026]: I1002 20:11:29.107133 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:29.109615 kubelet[2026]: I1002 20:11:29.108899 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c731b288-564f-493a-a6a8-a7178d354df5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c731b288-564f-493a-a6a8-a7178d354df5" (UID: "c731b288-564f-493a-a6a8-a7178d354df5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:29.109615 kubelet[2026]: I1002 20:11:29.108902 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:29.110257 kubelet[2026]: I1002 20:11:29.110214 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:29.111995 kubelet[2026]: I1002 20:11:29.111970 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-kube-api-access-gp9nj" (OuterVolumeSpecName: "kube-api-access-gp9nj") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "kube-api-access-gp9nj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:29.112060 kubelet[2026]: I1002 20:11:29.112035 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "febda0fe-6a93-400d-8c56-0e02135cc29e" (UID: "febda0fe-6a93-400d-8c56-0e02135cc29e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:29.112263 kubelet[2026]: I1002 20:11:29.112238 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c731b288-564f-493a-a6a8-a7178d354df5-kube-api-access-wtdrn" (OuterVolumeSpecName: "kube-api-access-wtdrn") pod "c731b288-564f-493a-a6a8-a7178d354df5" (UID: "c731b288-564f-493a-a6a8-a7178d354df5"). InnerVolumeSpecName "kube-api-access-wtdrn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206551 2026 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206599 2026 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206612 2026 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/febda0fe-6a93-400d-8c56-0e02135cc29e-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206621 2026 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206632 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c731b288-564f-493a-a6a8-a7178d354df5-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206641 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/febda0fe-6a93-400d-8c56-0e02135cc29e-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206647 kubelet[2026]: I1002 20:11:29.206650 2026 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-gp9nj\" (UniqueName: \"kubernetes.io/projected/febda0fe-6a93-400d-8c56-0e02135cc29e-kube-api-access-gp9nj\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206875 kubelet[2026]: I1002 20:11:29.206660 2026 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-wtdrn\" (UniqueName: \"kubernetes.io/projected/c731b288-564f-493a-a6a8-a7178d354df5-kube-api-access-wtdrn\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206875 kubelet[2026]: I1002 20:11:29.206668 2026 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.206875 kubelet[2026]: I1002 20:11:29.206677 2026 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/febda0fe-6a93-400d-8c56-0e02135cc29e-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:11:29.319669 update_engine[1135]: I1002 20:11:29.319614 1135 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:11:29.321619 update_engine[1135]: I1002 20:11:29.321594 1135 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:11:29.321619 update_engine[1135]: I1002 20:11:29.321617 1135 omaha_request_action.cc:619] Omaha request response: Oct 2 20:11:29.321619 update_engine[1135]: Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329808 1135 omaha_request_action.cc:409] No update. Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329828 1135 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329833 1135 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329836 1135 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329839 1135 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329843 1135 update_attempter.cc:302] Processing Done. Oct 2 20:11:29.329843 update_engine[1135]: I1002 20:11:29.329855 1135 update_attempter.cc:338] No update. Oct 2 20:11:29.330081 update_engine[1135]: I1002 20:11:29.329865 1135 update_check_scheduler.cc:74] Next update check in 49m43s Oct 2 20:11:29.330436 locksmithd[1175]: LastCheckedTime=1696277489 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:11:29.868668 systemd[1]: var-lib-kubelet-pods-febda0fe\x2d6a93\x2d400d\x2d8c56\x2d0e02135cc29e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:29.868767 systemd[1]: var-lib-kubelet-pods-febda0fe\x2d6a93\x2d400d\x2d8c56\x2d0e02135cc29e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:29.868821 systemd[1]: var-lib-kubelet-pods-c731b288\x2d564f\x2d493a\x2da6a8\x2da7178d354df5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwtdrn.mount: Deactivated successfully. Oct 2 20:11:29.868870 systemd[1]: var-lib-kubelet-pods-febda0fe\x2d6a93\x2d400d\x2d8c56\x2d0e02135cc29e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgp9nj.mount: Deactivated successfully. Oct 2 20:11:29.911563 kubelet[2026]: I1002 20:11:29.911491 2026 scope.go:115] "RemoveContainer" containerID="e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e" Oct 2 20:11:29.912628 env[1143]: time="2023-10-02T20:11:29.912586579Z" level=info msg="RemoveContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\"" Oct 2 20:11:29.915549 env[1143]: time="2023-10-02T20:11:29.915504144Z" level=info msg="RemoveContainer for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" returns successfully" Oct 2 20:11:29.915716 kubelet[2026]: I1002 20:11:29.915686 2026 scope.go:115] "RemoveContainer" containerID="e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e" Oct 2 20:11:29.915964 env[1143]: time="2023-10-02T20:11:29.915886815Z" level=error msg="ContainerStatus for \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\": not found" Oct 2 20:11:29.916104 kubelet[2026]: E1002 20:11:29.916082 2026 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\": not found" containerID="e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e" Oct 2 20:11:29.916164 kubelet[2026]: I1002 20:11:29.916116 2026 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e} err="failed to get container status \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\": rpc error: code = NotFound desc = an error occurred when try to find container \"e4db7018c133c6f9f7943fd70b74e1bec97d7eec5a1eec016c671bca1b073e8e\": not found" Oct 2 20:11:29.916164 kubelet[2026]: I1002 20:11:29.916127 2026 scope.go:115] "RemoveContainer" containerID="19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4" Oct 2 20:11:29.917151 env[1143]: time="2023-10-02T20:11:29.917114543Z" level=info msg="RemoveContainer for \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\"" Oct 2 20:11:29.918487 systemd[1]: Removed slice kubepods-burstable-podfebda0fe_6a93_400d_8c56_0e02135cc29e.slice. Oct 2 20:11:29.919443 env[1143]: time="2023-10-02T20:11:29.919379485Z" level=info msg="RemoveContainer for \"19146985a180601c90ce1f489ebf63838982febf4f5f3e7e314c6e8a1d206cb4\" returns successfully" Oct 2 20:11:29.920530 systemd[1]: Removed slice kubepods-besteffort-podc731b288_564f_493a_a6a8_a7178d354df5.slice. Oct 2 20:11:30.486074 kubelet[2026]: I1002 20:11:30.486033 2026 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=c731b288-564f-493a-a6a8-a7178d354df5 path="/var/lib/kubelet/pods/c731b288-564f-493a-a6a8-a7178d354df5/volumes" Oct 2 20:11:30.486458 kubelet[2026]: I1002 20:11:30.486443 2026 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=febda0fe-6a93-400d-8c56-0e02135cc29e path="/var/lib/kubelet/pods/febda0fe-6a93-400d-8c56-0e02135cc29e/volumes" Oct 2 20:11:30.836872 sshd[2971]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:30.836000 audit[2971]: USER_END pid=2971 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:30.836000 audit[2971]: CRED_DISP pid=2971 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:30.840029 systemd[1]: sshd@28-10.0.0.7:22-10.0.0.1:55128.service: Deactivated successfully. Oct 2 20:11:30.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.7:22-10.0.0.1:55128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:30.840665 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:11:30.840844 systemd[1]: session-29.scope: Consumed 1.494s CPU time. Oct 2 20:11:30.841242 systemd-logind[1133]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:11:30.842306 systemd[1]: Started sshd@29-10.0.0.7:22-10.0.0.1:55132.service. Oct 2 20:11:30.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.7:22-10.0.0.1:55132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:30.843080 systemd-logind[1133]: Removed session 29. Oct 2 20:11:30.880000 audit[3087]: USER_ACCT pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:30.882017 sshd[3087]: Accepted publickey for core from 10.0.0.1 port 55132 ssh2: RSA SHA256:JAs1apcNutvDkqjmOZG93AHJl+jbIx12KdulabYDxP4 Oct 2 20:11:30.881000 audit[3087]: CRED_ACQ pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:30.881000 audit[3087]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0b87bf0 a2=3 a3=1 items=0 ppid=1 pid=3087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.881000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:30.883569 sshd[3087]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:30.887085 systemd-logind[1133]: New session 30 of user core. Oct 2 20:11:30.888021 systemd[1]: Started session-30.scope. Oct 2 20:11:30.890000 audit[3087]: USER_START pid=3087 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:30.891000 audit[3089]: CRED_ACQ pid=3089 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:11:32.188637 kubelet[2026]: I1002 20:11:32.188599 2026 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:11:32.189025 kubelet[2026]: E1002 20:11:32.189009 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c731b288-564f-493a-a6a8-a7178d354df5" containerName="cilium-operator" Oct 2 20:11:32.189089 kubelet[2026]: E1002 20:11:32.189080 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189160 kubelet[2026]: E1002 20:11:32.189151 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189217 kubelet[2026]: E1002 20:11:32.189208 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189273 kubelet[2026]: E1002 20:11:32.189264 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189327 kubelet[2026]: E1002 20:11:32.189318 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189620 kubelet[2026]: I1002 20:11:32.189604 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189699 kubelet[2026]: I1002 20:11:32.189689 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189750 kubelet[2026]: I1002 20:11:32.189742 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="c731b288-564f-493a-a6a8-a7178d354df5" containerName="cilium-operator" Oct 2 20:11:32.189817 kubelet[2026]: I1002 20:11:32.189808 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189876 kubelet[2026]: I1002 20:11:32.189867 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.189934 kubelet[2026]: I1002 20:11:32.189925 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.190025 kubelet[2026]: E1002 20:11:32.190012 2026 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.190099 kubelet[2026]: I1002 20:11:32.190089 2026 memory_manager.go:346] "RemoveStaleState removing state" podUID="febda0fe-6a93-400d-8c56-0e02135cc29e" containerName="mount-cgroup" Oct 2 20:11:32.195358 systemd[1]: Created slice kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice. Oct 2 20:11:32.319510 kubelet[2026]: I1002 20:11:32.319467 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-bpf-maps\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319660 kubelet[2026]: I1002 20:11:32.319521 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-run\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319660 kubelet[2026]: I1002 20:11:32.319545 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-cgroup\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319660 kubelet[2026]: I1002 20:11:32.319600 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-etc-cni-netd\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319660 kubelet[2026]: I1002 20:11:32.319624 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-lib-modules\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319660 kubelet[2026]: I1002 20:11:32.319643 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-config-path\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319788 kubelet[2026]: I1002 20:11:32.319703 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cni-path\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319788 kubelet[2026]: I1002 20:11:32.319742 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rtx8h\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-kube-api-access-rtx8h\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319834 kubelet[2026]: I1002 20:11:32.319784 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-net\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319834 kubelet[2026]: I1002 20:11:32.319828 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-xtables-lock\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319877 kubelet[2026]: I1002 20:11:32.319850 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-kernel\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319877 kubelet[2026]: I1002 20:11:32.319869 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hubble-tls\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319926 kubelet[2026]: I1002 20:11:32.319888 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-ipsec-secrets\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319926 kubelet[2026]: I1002 20:11:32.319908 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hostproc\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.319983 kubelet[2026]: I1002 20:11:32.319929 2026 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-clustermesh-secrets\") pod \"cilium-v4bjk\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " pod="kube-system/cilium-v4bjk" Oct 2 20:11:32.484289 kubelet[2026]: E1002 20:11:32.484177 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:32.497743 kubelet[2026]: E1002 20:11:32.497707 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:32.498465 env[1143]: time="2023-10-02T20:11:32.498146712Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v4bjk,Uid:8e173cc4-a52b-4ea3-80d5-d2533ef39203,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:32.569597 kubelet[2026]: E1002 20:11:32.569554 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:32.896513 env[1143]: time="2023-10-02T20:11:32.896456638Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:32.897770 env[1143]: time="2023-10-02T20:11:32.897733451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:32.900215 env[1143]: time="2023-10-02T20:11:32.900185999Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:32.902638 env[1143]: time="2023-10-02T20:11:32.902015280Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:32.920552 env[1143]: time="2023-10-02T20:11:32.920488487Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:32.920552 env[1143]: time="2023-10-02T20:11:32.920538006Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:32.920552 env[1143]: time="2023-10-02T20:11:32.920549085Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:32.920824 env[1143]: time="2023-10-02T20:11:32.920787720Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb pid=3110 runtime=io.containerd.runc.v2 Oct 2 20:11:32.933068 systemd[1]: Started cri-containerd-bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb.scope. Oct 2 20:11:32.974641 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:11:32.974747 kernel: audit: type=1400 audit(1696277492.972:1317): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.979123 kernel: audit: type=1400 audit(1696277492.972:1318): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.979174 kernel: audit: type=1400 audit(1696277492.972:1319): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.981378 kernel: audit: type=1400 audit(1696277492.972:1320): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.985917 kernel: audit: type=1400 audit(1696277492.972:1321): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.985968 kernel: audit: type=1400 audit(1696277492.972:1322): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.991099 kernel: audit: type=1400 audit(1696277492.972:1323): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.994611 kernel: audit: type=1400 audit(1696277492.972:1324): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.997391 kernel: audit: type=1400 audit(1696277492.972:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.999861 kernel: audit: type=1400 audit(1696277492.973:1326): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.973000 audit: BPF prog-id=131 op=LOAD Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=3110 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:32.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633664336564376362656437383737626332626262366533336533 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=3110 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:32.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633664336564376362656437383737626332626262366533336533 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.978000 audit: BPF prog-id=132 op=LOAD Oct 2 20:11:32.978000 audit[3120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=3110 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:32.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633664336564376362656437383737626332626262366533336533 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.980000 audit: BPF prog-id=133 op=LOAD Oct 2 20:11:32.980000 audit[3120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=3110 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:32.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633664336564376362656437383737626332626262366533336533 Oct 2 20:11:32.982000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:11:32.982000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:32.982000 audit: BPF prog-id=134 op=LOAD Oct 2 20:11:32.982000 audit[3120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=3110 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:32.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633664336564376362656437383737626332626262366533336533 Oct 2 20:11:33.007760 env[1143]: time="2023-10-02T20:11:33.007711640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v4bjk,Uid:8e173cc4-a52b-4ea3-80d5-d2533ef39203,Namespace:kube-system,Attempt:0,} returns sandbox id \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\"" Oct 2 20:11:33.008595 kubelet[2026]: E1002 20:11:33.008365 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:33.011235 env[1143]: time="2023-10-02T20:11:33.010621382Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:11:33.026839 env[1143]: time="2023-10-02T20:11:33.026784980Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" Oct 2 20:11:33.027683 env[1143]: time="2023-10-02T20:11:33.027658163Z" level=info msg="StartContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" Oct 2 20:11:33.044542 systemd[1]: Started cri-containerd-32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb.scope. Oct 2 20:11:33.065518 systemd[1]: cri-containerd-32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb.scope: Deactivated successfully. Oct 2 20:11:33.083999 env[1143]: time="2023-10-02T20:11:33.083946882Z" level=info msg="shim disconnected" id=32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb Oct 2 20:11:33.083999 env[1143]: time="2023-10-02T20:11:33.083999561Z" level=warning msg="cleaning up after shim disconnected" id=32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb namespace=k8s.io Oct 2 20:11:33.084212 env[1143]: time="2023-10-02T20:11:33.084009401Z" level=info msg="cleaning up dead shim" Oct 2 20:11:33.092315 env[1143]: time="2023-10-02T20:11:33.092265477Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3167 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:33.092724 env[1143]: time="2023-10-02T20:11:33.092669628Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:33.092899 env[1143]: time="2023-10-02T20:11:33.092855825Z" level=error msg="Failed to pipe stdout of container \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" error="reading from a closed fifo" Oct 2 20:11:33.092979 env[1143]: time="2023-10-02T20:11:33.092875104Z" level=error msg="Failed to pipe stderr of container \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" error="reading from a closed fifo" Oct 2 20:11:33.094410 env[1143]: time="2023-10-02T20:11:33.094364395Z" level=error msg="StartContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:33.094999 kubelet[2026]: E1002 20:11:33.094627 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb" Oct 2 20:11:33.094999 kubelet[2026]: E1002 20:11:33.094734 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:33.094999 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:33.094999 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:11:33.094999 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rtx8h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:33.094999 kubelet[2026]: E1002 20:11:33.094768 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:11:33.925599 kubelet[2026]: E1002 20:11:33.924577 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:33.930603 env[1143]: time="2023-10-02T20:11:33.930563550Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:11:33.943194 env[1143]: time="2023-10-02T20:11:33.943111660Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" Oct 2 20:11:33.944069 env[1143]: time="2023-10-02T20:11:33.944028722Z" level=info msg="StartContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" Oct 2 20:11:33.963308 systemd[1]: Started cri-containerd-d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb.scope. Oct 2 20:11:33.999590 systemd[1]: cri-containerd-d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb.scope: Deactivated successfully. Oct 2 20:11:34.006860 env[1143]: time="2023-10-02T20:11:34.006806079Z" level=info msg="shim disconnected" id=d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb Oct 2 20:11:34.006860 env[1143]: time="2023-10-02T20:11:34.006861358Z" level=warning msg="cleaning up after shim disconnected" id=d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb namespace=k8s.io Oct 2 20:11:34.007080 env[1143]: time="2023-10-02T20:11:34.006873318Z" level=info msg="cleaning up dead shim" Oct 2 20:11:34.015201 env[1143]: time="2023-10-02T20:11:34.015155124Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3202 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:34.015504 env[1143]: time="2023-10-02T20:11:34.015447039Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:34.015692 env[1143]: time="2023-10-02T20:11:34.015658755Z" level=error msg="Failed to pipe stdout of container \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" error="reading from a closed fifo" Oct 2 20:11:34.016018 env[1143]: time="2023-10-02T20:11:34.015974749Z" level=error msg="Failed to pipe stderr of container \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" error="reading from a closed fifo" Oct 2 20:11:34.018595 env[1143]: time="2023-10-02T20:11:34.018549181Z" level=error msg="StartContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:34.018971 kubelet[2026]: E1002 20:11:34.018935 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb" Oct 2 20:11:34.019077 kubelet[2026]: E1002 20:11:34.019066 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:34.019077 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:34.019077 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:11:34.019077 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rtx8h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:34.019207 kubelet[2026]: E1002 20:11:34.019106 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:11:34.425459 systemd[1]: run-containerd-runc-k8s.io-d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb-runc.hUbizp.mount: Deactivated successfully. Oct 2 20:11:34.425560 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb-rootfs.mount: Deactivated successfully. Oct 2 20:11:34.927830 kubelet[2026]: I1002 20:11:34.927495 2026 scope.go:115] "RemoveContainer" containerID="32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb" Oct 2 20:11:34.927830 kubelet[2026]: I1002 20:11:34.927796 2026 scope.go:115] "RemoveContainer" containerID="32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb" Oct 2 20:11:34.929359 env[1143]: time="2023-10-02T20:11:34.929317120Z" level=info msg="RemoveContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" Oct 2 20:11:34.929760 env[1143]: time="2023-10-02T20:11:34.929669314Z" level=info msg="RemoveContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\"" Oct 2 20:11:34.929836 env[1143]: time="2023-10-02T20:11:34.929756592Z" level=error msg="RemoveContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\" failed" error="failed to set removing state for container \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\": container is already in removing state" Oct 2 20:11:34.931466 kubelet[2026]: E1002 20:11:34.930932 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\": container is already in removing state" containerID="32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb" Oct 2 20:11:34.931466 kubelet[2026]: E1002 20:11:34.930964 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb": container is already in removing state; Skipping pod "cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)" Oct 2 20:11:34.931466 kubelet[2026]: E1002 20:11:34.931018 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:34.931466 kubelet[2026]: E1002 20:11:34.931244 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:11:34.939401 env[1143]: time="2023-10-02T20:11:34.939355494Z" level=info msg="RemoveContainer for \"32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb\" returns successfully" Oct 2 20:11:36.192074 kubelet[2026]: W1002 20:11:36.192014 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice/cri-containerd-32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb.scope WatchSource:0}: container "32752a0f512c05738413033421fe25da228d2524d01faa6a729aa8d7f180c2fb" in namespace "k8s.io": not found Oct 2 20:11:37.571049 kubelet[2026]: E1002 20:11:37.571011 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:39.238000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.243783 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 20:11:39.243891 kernel: audit: type=1400 audit(1696277499.238:1335): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.243926 kernel: audit: type=1300 audit(1696277499.238:1335): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008d61860 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.238000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008d61860 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.250568 kernel: audit: type=1327 audit(1696277499.238:1335): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.250635 kernel: audit: type=1400 audit(1696277499.239:1336): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.239000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.239000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003ee9650 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.257224 kernel: audit: type=1300 audit(1696277499.239:1336): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003ee9650 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.257288 kernel: audit: type=1327 audit(1696277499.239:1336): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.239000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.239000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.263118 kernel: audit: type=1400 audit(1696277499.239:1337): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.263171 kernel: audit: type=1300 audit(1696277499.239:1337): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008b2b6e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.239000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008b2b6e0 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.239000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.269868 kernel: audit: type=1327 audit(1696277499.239:1337): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.269933 kernel: audit: type=1400 audit(1696277499.244:1338): avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.244000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.244000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008b2b720 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.245000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.245000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003ee9c80 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.249000 audit[1897]: AVC avc: denied { watch } for pid=1897 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6811 scontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.249000 audit[1897]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008d61920 a2=fc6 a3=0 items=0 ppid=1741 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c189,c893 key=(null) Oct 2 20:11:39.249000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E37002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Oct 2 20:11:39.302795 kubelet[2026]: W1002 20:11:39.302631 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice/cri-containerd-d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb.scope WatchSource:0}: task d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb not found: not found Oct 2 20:11:39.619000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.619000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000976080 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:39.619000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:39.619000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6809 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:39.619000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001674db0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:39.619000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:42.446247 env[1143]: time="2023-10-02T20:11:42.446196715Z" level=info msg="StopPodSandbox for \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\"" Oct 2 20:11:42.446577 env[1143]: time="2023-10-02T20:11:42.446283274Z" level=info msg="TearDown network for sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" successfully" Oct 2 20:11:42.446577 env[1143]: time="2023-10-02T20:11:42.446317914Z" level=info msg="StopPodSandbox for \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" returns successfully" Oct 2 20:11:42.446719 env[1143]: time="2023-10-02T20:11:42.446676471Z" level=info msg="RemovePodSandbox for \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\"" Oct 2 20:11:42.446775 env[1143]: time="2023-10-02T20:11:42.446713870Z" level=info msg="Forcibly stopping sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\"" Oct 2 20:11:42.446808 env[1143]: time="2023-10-02T20:11:42.446788150Z" level=info msg="TearDown network for sandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" successfully" Oct 2 20:11:42.448925 env[1143]: time="2023-10-02T20:11:42.448885892Z" level=info msg="RemovePodSandbox \"6ceae5add64b709a9f363cd7b2ba76db4668e6d69e95a1bc58c6d3ea0c28b088\" returns successfully" Oct 2 20:11:42.449273 env[1143]: time="2023-10-02T20:11:42.449245249Z" level=info msg="StopPodSandbox for \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\"" Oct 2 20:11:42.449361 env[1143]: time="2023-10-02T20:11:42.449328688Z" level=info msg="TearDown network for sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" successfully" Oct 2 20:11:42.449399 env[1143]: time="2023-10-02T20:11:42.449360688Z" level=info msg="StopPodSandbox for \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" returns successfully" Oct 2 20:11:42.449627 env[1143]: time="2023-10-02T20:11:42.449603726Z" level=info msg="RemovePodSandbox for \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\"" Oct 2 20:11:42.449662 env[1143]: time="2023-10-02T20:11:42.449633246Z" level=info msg="Forcibly stopping sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\"" Oct 2 20:11:42.449706 env[1143]: time="2023-10-02T20:11:42.449690445Z" level=info msg="TearDown network for sandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" successfully" Oct 2 20:11:42.452918 env[1143]: time="2023-10-02T20:11:42.452884178Z" level=info msg="RemovePodSandbox \"4c2760e28ea0d03518ef1ebcf3f0df0039408832854d19190aafc2e4c25e2e8d\" returns successfully" Oct 2 20:11:42.572619 kubelet[2026]: E1002 20:11:42.572583 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:46.484780 kubelet[2026]: E1002 20:11:46.484741 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:46.489131 env[1143]: time="2023-10-02T20:11:46.489076248Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:11:46.499557 env[1143]: time="2023-10-02T20:11:46.499514407Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" Oct 2 20:11:46.499950 env[1143]: time="2023-10-02T20:11:46.499923766Z" level=info msg="StartContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" Oct 2 20:11:46.515168 systemd[1]: Started cri-containerd-41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450.scope. Oct 2 20:11:46.532786 systemd[1]: cri-containerd-41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450.scope: Deactivated successfully. Oct 2 20:11:46.536380 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450-rootfs.mount: Deactivated successfully. Oct 2 20:11:46.543465 env[1143]: time="2023-10-02T20:11:46.543410035Z" level=info msg="shim disconnected" id=41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450 Oct 2 20:11:46.543618 env[1143]: time="2023-10-02T20:11:46.543470515Z" level=warning msg="cleaning up after shim disconnected" id=41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450 namespace=k8s.io Oct 2 20:11:46.543618 env[1143]: time="2023-10-02T20:11:46.543480315Z" level=info msg="cleaning up dead shim" Oct 2 20:11:46.552492 env[1143]: time="2023-10-02T20:11:46.552456359Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3241 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:46.552750 env[1143]: time="2023-10-02T20:11:46.552685278Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 20:11:46.552903 env[1143]: time="2023-10-02T20:11:46.552856758Z" level=error msg="Failed to pipe stdout of container \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" error="reading from a closed fifo" Oct 2 20:11:46.552950 env[1143]: time="2023-10-02T20:11:46.552898438Z" level=error msg="Failed to pipe stderr of container \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" error="reading from a closed fifo" Oct 2 20:11:46.554184 env[1143]: time="2023-10-02T20:11:46.554141913Z" level=error msg="StartContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:46.554481 kubelet[2026]: E1002 20:11:46.554452 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450" Oct 2 20:11:46.554577 kubelet[2026]: E1002 20:11:46.554557 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:46.554577 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:46.554577 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:11:46.554577 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rtx8h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:46.554701 kubelet[2026]: E1002 20:11:46.554594 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:11:46.950686 kubelet[2026]: I1002 20:11:46.950618 2026 scope.go:115] "RemoveContainer" containerID="d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb" Oct 2 20:11:46.951023 kubelet[2026]: I1002 20:11:46.950992 2026 scope.go:115] "RemoveContainer" containerID="d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb" Oct 2 20:11:46.952562 env[1143]: time="2023-10-02T20:11:46.952345549Z" level=info msg="RemoveContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" Oct 2 20:11:46.952707 env[1143]: time="2023-10-02T20:11:46.952574628Z" level=info msg="RemoveContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\"" Oct 2 20:11:46.952853 env[1143]: time="2023-10-02T20:11:46.952799707Z" level=error msg="RemoveContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\" failed" error="failed to set removing state for container \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\": container is already in removing state" Oct 2 20:11:46.953059 kubelet[2026]: E1002 20:11:46.953037 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\": container is already in removing state" containerID="d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb" Oct 2 20:11:46.953130 kubelet[2026]: E1002 20:11:46.953074 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb": container is already in removing state; Skipping pod "cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)" Oct 2 20:11:46.953878 kubelet[2026]: E1002 20:11:46.953143 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:11:46.953878 kubelet[2026]: E1002 20:11:46.953461 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:11:46.954703 env[1143]: time="2023-10-02T20:11:46.954671220Z" level=info msg="RemoveContainer for \"d12c662e8786da6cdd778e7e904a358e98fa79b8e2883dc115d75aa66dde16bb\" returns successfully" Oct 2 20:11:47.574155 kubelet[2026]: E1002 20:11:47.574086 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:49.647893 kubelet[2026]: W1002 20:11:49.647800 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice/cri-containerd-41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450.scope WatchSource:0}: task 41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450 not found: not found Oct 2 20:11:52.575550 kubelet[2026]: E1002 20:11:52.575520 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:54.849000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.853601 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:54.853684 kernel: audit: type=1400 audit(1696277514.849:1343): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.853717 kernel: audit: type=1400 audit(1696277514.849:1344): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.849000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.849000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010104c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.860253 kernel: audit: type=1300 audit(1696277514.849:1344): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40010104c0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.860309 kernel: audit: type=1300 audit(1696277514.849:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017c06e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.849000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017c06e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.867397 kernel: audit: type=1327 audit(1696277514.849:1344): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.867470 kernel: audit: type=1327 audit(1696277514.849:1343): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.849000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.874295 kernel: audit: type=1400 audit(1696277514.849:1345): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.874360 kernel: audit: type=1300 audit(1696277514.849:1345): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f1e0e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.849000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f1e0e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.881425 kernel: audit: type=1327 audit(1696277514.849:1345): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:54.881458 kernel: audit: type=1400 audit(1696277514.849:1346): avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.849000 audit[1919]: AVC avc: denied { watch } for pid=1919 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:54.849000 audit[1919]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010104e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c884 key=(null) Oct 2 20:11:54.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:57.577174 kubelet[2026]: E1002 20:11:57.577114 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:00.483995 kubelet[2026]: E1002 20:12:00.483956 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:00.484323 kubelet[2026]: E1002 20:12:00.484175 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:12:02.578683 kubelet[2026]: E1002 20:12:02.578654 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:07.580078 kubelet[2026]: E1002 20:12:07.580045 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:11.484120 kubelet[2026]: E1002 20:12:11.484073 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:11.486117 env[1143]: time="2023-10-02T20:12:11.486072938Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:12:11.495850 env[1143]: time="2023-10-02T20:12:11.495669520Z" level=info msg="CreateContainer within sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\"" Oct 2 20:12:11.496432 env[1143]: time="2023-10-02T20:12:11.496385853Z" level=info msg="StartContainer for \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\"" Oct 2 20:12:11.513893 systemd[1]: Started cri-containerd-d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b.scope. Oct 2 20:12:11.530694 systemd[1]: cri-containerd-d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b.scope: Deactivated successfully. Oct 2 20:12:11.538778 env[1143]: time="2023-10-02T20:12:11.538733056Z" level=info msg="shim disconnected" id=d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b Oct 2 20:12:11.538996 env[1143]: time="2023-10-02T20:12:11.538974501Z" level=warning msg="cleaning up after shim disconnected" id=d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b namespace=k8s.io Oct 2 20:12:11.539062 env[1143]: time="2023-10-02T20:12:11.539048222Z" level=info msg="cleaning up dead shim" Oct 2 20:12:11.547354 env[1143]: time="2023-10-02T20:12:11.547316459Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3282 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:11.547746 env[1143]: time="2023-10-02T20:12:11.547693266Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:12:11.547986 env[1143]: time="2023-10-02T20:12:11.547942391Z" level=error msg="Failed to pipe stderr of container \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\"" error="reading from a closed fifo" Oct 2 20:12:11.550553 env[1143]: time="2023-10-02T20:12:11.550512720Z" level=error msg="Failed to pipe stdout of container \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\"" error="reading from a closed fifo" Oct 2 20:12:11.552177 env[1143]: time="2023-10-02T20:12:11.552121790Z" level=error msg="StartContainer for \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:11.552818 kubelet[2026]: E1002 20:12:11.552370 2026 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b" Oct 2 20:12:11.552818 kubelet[2026]: E1002 20:12:11.552485 2026 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:11.552818 kubelet[2026]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:11.552818 kubelet[2026]: rm /hostbin/cilium-mount Oct 2 20:12:11.552818 kubelet[2026]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rtx8h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:11.552818 kubelet[2026]: E1002 20:12:11.552522 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:12:11.996049 kubelet[2026]: I1002 20:12:11.996020 2026 scope.go:115] "RemoveContainer" containerID="41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450" Oct 2 20:12:11.996434 kubelet[2026]: I1002 20:12:11.996325 2026 scope.go:115] "RemoveContainer" containerID="41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450" Oct 2 20:12:11.997503 env[1143]: time="2023-10-02T20:12:11.997469195Z" level=info msg="RemoveContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" Oct 2 20:12:11.998186 env[1143]: time="2023-10-02T20:12:11.998064966Z" level=info msg="RemoveContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\"" Oct 2 20:12:11.998457 env[1143]: time="2023-10-02T20:12:11.998397892Z" level=error msg="RemoveContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\" failed" error="failed to set removing state for container \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\": container is already in removing state" Oct 2 20:12:11.998713 kubelet[2026]: E1002 20:12:11.998608 2026 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\": container is already in removing state" containerID="41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450" Oct 2 20:12:11.998713 kubelet[2026]: E1002 20:12:11.998652 2026 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450": container is already in removing state; Skipping pod "cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)" Oct 2 20:12:11.998989 kubelet[2026]: E1002 20:12:11.998887 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:11.999438 kubelet[2026]: E1002 20:12:11.999387 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:12:12.002441 env[1143]: time="2023-10-02T20:12:12.002401209Z" level=info msg="RemoveContainer for \"41ecc3dba20625cd5a311df97ea9edb0c87e78f219792fc045a2eae78b90b450\" returns successfully" Oct 2 20:12:12.493406 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b-rootfs.mount: Deactivated successfully. Oct 2 20:12:12.581561 kubelet[2026]: E1002 20:12:12.581522 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:14.644196 kubelet[2026]: W1002 20:12:14.644147 2026 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice/cri-containerd-d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b.scope WatchSource:0}: task d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b not found: not found Oct 2 20:12:17.582924 kubelet[2026]: E1002 20:12:17.582876 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:22.583545 kubelet[2026]: E1002 20:12:22.583518 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:26.483946 kubelet[2026]: E1002 20:12:26.483906 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:26.484276 kubelet[2026]: E1002 20:12:26.484133 2026 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-v4bjk_kube-system(8e173cc4-a52b-4ea3-80d5-d2533ef39203)\"" pod="kube-system/cilium-v4bjk" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 Oct 2 20:12:27.483824 kubelet[2026]: E1002 20:12:27.483791 2026 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 20:12:27.584610 kubelet[2026]: E1002 20:12:27.584585 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:32.586397 kubelet[2026]: E1002 20:12:32.586355 2026 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:33.314440 env[1143]: time="2023-10-02T20:12:33.314382073Z" level=info msg="StopPodSandbox for \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\"" Oct 2 20:12:33.314769 env[1143]: time="2023-10-02T20:12:33.314459116Z" level=info msg="Container to stop \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:12:33.316453 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb-shm.mount: Deactivated successfully. Oct 2 20:12:33.326043 systemd[1]: cri-containerd-bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb.scope: Deactivated successfully. Oct 2 20:12:33.325000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:12:33.327808 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:12:33.327889 kernel: audit: type=1334 audit(1696277553.325:1347): prog-id=131 op=UNLOAD Oct 2 20:12:33.331000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:12:33.333457 kernel: audit: type=1334 audit(1696277553.331:1348): prog-id=134 op=UNLOAD Oct 2 20:12:33.346978 sshd[3087]: pam_unix(sshd:session): session closed for user core Oct 2 20:12:33.347000 audit[3087]: USER_END pid=3087 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:33.349521 systemd[1]: sshd@29-10.0.0.7:22-10.0.0.1:55132.service: Deactivated successfully. Oct 2 20:12:33.350353 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:12:33.350543 systemd[1]: session-30.scope: Consumed 1.556s CPU time. Oct 2 20:12:33.350936 systemd-logind[1133]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:12:33.347000 audit[3087]: CRED_DISP pid=3087 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:33.352232 systemd-logind[1133]: Removed session 30. Oct 2 20:12:33.354748 kernel: audit: type=1106 audit(1696277553.347:1349): pid=3087 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:33.354816 kernel: audit: type=1104 audit(1696277553.347:1350): pid=3087 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 20:12:33.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.7:22-10.0.0.1:55132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:33.356039 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb-rootfs.mount: Deactivated successfully. Oct 2 20:12:33.359186 kernel: audit: type=1131 audit(1696277553.349:1351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.7:22-10.0.0.1:55132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:33.377158 env[1143]: time="2023-10-02T20:12:33.377113734Z" level=info msg="shim disconnected" id=bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb Oct 2 20:12:33.377158 env[1143]: time="2023-10-02T20:12:33.377160456Z" level=warning msg="cleaning up after shim disconnected" id=bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb namespace=k8s.io Oct 2 20:12:33.377379 env[1143]: time="2023-10-02T20:12:33.377171216Z" level=info msg="cleaning up dead shim" Oct 2 20:12:33.386114 env[1143]: time="2023-10-02T20:12:33.386066748Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3316 runtime=io.containerd.runc.v2\n" Oct 2 20:12:33.386402 env[1143]: time="2023-10-02T20:12:33.386364998Z" level=info msg="TearDown network for sandbox \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" successfully" Oct 2 20:12:33.386402 env[1143]: time="2023-10-02T20:12:33.386394359Z" level=info msg="StopPodSandbox for \"bcc6d3ed7cbed7877bc2bbb6e33e3a108f6db39816ba80a95db7df05f196ddfb\" returns successfully" Oct 2 20:12:33.532746 kubelet[2026]: I1002 20:12:33.532709 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-config-path\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532762 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hubble-tls\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532789 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-ipsec-secrets\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532809 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-net\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532831 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-lib-modules\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532867 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-clustermesh-secrets\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532886 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-xtables-lock\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532905 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-kernel\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532925 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-bpf-maps\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.532943 kubelet[2026]: I1002 20:12:33.532946 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-etc-cni-netd\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.532965 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rtx8h\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-kube-api-access-rtx8h\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.532987 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-cgroup\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.533006 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-run\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.533022 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cni-path\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.533039 2026 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hostproc\") pod \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\" (UID: \"8e173cc4-a52b-4ea3-80d5-d2533ef39203\") " Oct 2 20:12:33.533154 kubelet[2026]: I1002 20:12:33.533100 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hostproc" (OuterVolumeSpecName: "hostproc") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.533301 kubelet[2026]: W1002 20:12:33.533270 2026 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/8e173cc4-a52b-4ea3-80d5-d2533ef39203/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:12:33.533536 kubelet[2026]: I1002 20:12:33.533511 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534044 kubelet[2026]: I1002 20:12:33.534022 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534083 kubelet[2026]: I1002 20:12:33.534058 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534083 kubelet[2026]: I1002 20:12:33.534076 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534234 kubelet[2026]: I1002 20:12:33.534218 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534396 kubelet[2026]: I1002 20:12:33.534380 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534445 kubelet[2026]: I1002 20:12:33.534406 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534445 kubelet[2026]: I1002 20:12:33.534440 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cni-path" (OuterVolumeSpecName: "cni-path") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.534504 kubelet[2026]: I1002 20:12:33.534464 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:12:33.535114 kubelet[2026]: I1002 20:12:33.535093 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:12:33.537263 systemd[1]: var-lib-kubelet-pods-8e173cc4\x2da52b\x2d4ea3\x2d80d5\x2dd2533ef39203-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:12:33.538293 kubelet[2026]: I1002 20:12:33.537783 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:12:33.538293 kubelet[2026]: I1002 20:12:33.538214 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:12:33.538494 kubelet[2026]: I1002 20:12:33.538472 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-kube-api-access-rtx8h" (OuterVolumeSpecName: "kube-api-access-rtx8h") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "kube-api-access-rtx8h". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:12:33.538625 systemd[1]: var-lib-kubelet-pods-8e173cc4\x2da52b\x2d4ea3\x2d80d5\x2dd2533ef39203-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drtx8h.mount: Deactivated successfully. Oct 2 20:12:33.538705 systemd[1]: var-lib-kubelet-pods-8e173cc4\x2da52b\x2d4ea3\x2d80d5\x2dd2533ef39203-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:12:33.539701 kubelet[2026]: I1002 20:12:33.539671 2026 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "8e173cc4-a52b-4ea3-80d5-d2533ef39203" (UID: "8e173cc4-a52b-4ea3-80d5-d2533ef39203"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:12:33.540145 systemd[1]: var-lib-kubelet-pods-8e173cc4\x2da52b\x2d4ea3\x2d80d5\x2dd2533ef39203-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:12:33.634125 kubelet[2026]: I1002 20:12:33.634033 2026 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634500 kubelet[2026]: I1002 20:12:33.634483 2026 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634586 kubelet[2026]: I1002 20:12:33.634576 2026 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634646 kubelet[2026]: I1002 20:12:33.634638 2026 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634708 kubelet[2026]: I1002 20:12:33.634699 2026 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634781 kubelet[2026]: I1002 20:12:33.634764 2026 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.634859 kubelet[2026]: I1002 20:12:33.634849 2026 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-rtx8h\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-kube-api-access-rtx8h\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635267 kubelet[2026]: I1002 20:12:33.635251 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635364 kubelet[2026]: I1002 20:12:33.635354 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635441 kubelet[2026]: I1002 20:12:33.635431 2026 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635510 kubelet[2026]: I1002 20:12:33.635502 2026 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635573 kubelet[2026]: I1002 20:12:33.635565 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635632 kubelet[2026]: I1002 20:12:33.635623 2026 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8e173cc4-a52b-4ea3-80d5-d2533ef39203-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635691 kubelet[2026]: I1002 20:12:33.635682 2026 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8e173cc4-a52b-4ea3-80d5-d2533ef39203-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:33.635749 kubelet[2026]: I1002 20:12:33.635739 2026 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8e173cc4-a52b-4ea3-80d5-d2533ef39203-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 20:12:34.034733 kubelet[2026]: I1002 20:12:34.034640 2026 scope.go:115] "RemoveContainer" containerID="d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b" Oct 2 20:12:34.036646 env[1143]: time="2023-10-02T20:12:34.036566410Z" level=info msg="RemoveContainer for \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\"" Oct 2 20:12:34.043367 systemd[1]: Removed slice kubepods-burstable-pod8e173cc4_a52b_4ea3_80d5_d2533ef39203.slice. Oct 2 20:12:34.044788 env[1143]: time="2023-10-02T20:12:34.044736163Z" level=info msg="RemoveContainer for \"d8264dca43cdd544f1bdbe95235b0ef950e66a5393b1b5794cb2bbbbbc8a433b\" returns successfully" Oct 2 20:12:34.487626 kubelet[2026]: I1002 20:12:34.487588 2026 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=8e173cc4-a52b-4ea3-80d5-d2533ef39203 path="/var/lib/kubelet/pods/8e173cc4-a52b-4ea3-80d5-d2533ef39203/volumes"