Feb 12 20:23:52.793972 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Feb 12 18:05:31 -00 2024 Feb 12 20:23:52.793990 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 20:23:52.793998 kernel: BIOS-provided physical RAM map: Feb 12 20:23:52.794003 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Feb 12 20:23:52.794009 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Feb 12 20:23:52.794014 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Feb 12 20:23:52.794020 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Feb 12 20:23:52.794026 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Feb 12 20:23:52.794043 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Feb 12 20:23:52.794048 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Feb 12 20:23:52.794054 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Feb 12 20:23:52.794059 kernel: NX (Execute Disable) protection: active Feb 12 20:23:52.794065 kernel: SMBIOS 2.8 present. Feb 12 20:23:52.794070 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Feb 12 20:23:52.794079 kernel: Hypervisor detected: KVM Feb 12 20:23:52.794085 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Feb 12 20:23:52.794091 kernel: kvm-clock: cpu 0, msr 71faa001, primary cpu clock Feb 12 20:23:52.794097 kernel: kvm-clock: using sched offset of 2162461539 cycles Feb 12 20:23:52.794103 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Feb 12 20:23:52.794109 kernel: tsc: Detected 2794.748 MHz processor Feb 12 20:23:52.794115 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Feb 12 20:23:52.794121 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Feb 12 20:23:52.794128 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Feb 12 20:23:52.794135 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 12 20:23:52.794141 kernel: Using GB pages for direct mapping Feb 12 20:23:52.794147 kernel: ACPI: Early table checksum verification disabled Feb 12 20:23:52.794153 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Feb 12 20:23:52.794159 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794165 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794171 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794177 kernel: ACPI: FACS 0x000000009CFE0000 000040 Feb 12 20:23:52.794182 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794192 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794201 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 12 20:23:52.794214 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Feb 12 20:23:52.794223 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Feb 12 20:23:52.794231 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Feb 12 20:23:52.794239 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Feb 12 20:23:52.794247 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Feb 12 20:23:52.794255 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Feb 12 20:23:52.794270 kernel: No NUMA configuration found Feb 12 20:23:52.794279 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Feb 12 20:23:52.794288 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Feb 12 20:23:52.794297 kernel: Zone ranges: Feb 12 20:23:52.794306 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 12 20:23:52.794315 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Feb 12 20:23:52.794323 kernel: Normal empty Feb 12 20:23:52.794329 kernel: Movable zone start for each node Feb 12 20:23:52.794336 kernel: Early memory node ranges Feb 12 20:23:52.794343 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Feb 12 20:23:52.794357 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Feb 12 20:23:52.794367 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Feb 12 20:23:52.794376 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Feb 12 20:23:52.794384 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Feb 12 20:23:52.794392 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Feb 12 20:23:52.794401 kernel: ACPI: PM-Timer IO Port: 0x608 Feb 12 20:23:52.794407 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Feb 12 20:23:52.794414 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Feb 12 20:23:52.794420 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Feb 12 20:23:52.794427 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Feb 12 20:23:52.794433 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 12 20:23:52.794439 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Feb 12 20:23:52.794446 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Feb 12 20:23:52.794452 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Feb 12 20:23:52.794459 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Feb 12 20:23:52.794466 kernel: TSC deadline timer available Feb 12 20:23:52.794472 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Feb 12 20:23:52.794478 kernel: kvm-guest: KVM setup pv remote TLB flush Feb 12 20:23:52.794484 kernel: kvm-guest: setup PV sched yield Feb 12 20:23:52.794491 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Feb 12 20:23:52.794497 kernel: Booting paravirtualized kernel on KVM Feb 12 20:23:52.794504 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 12 20:23:52.794511 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Feb 12 20:23:52.794518 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Feb 12 20:23:52.794525 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Feb 12 20:23:52.794531 kernel: pcpu-alloc: [0] 0 1 2 3 Feb 12 20:23:52.794537 kernel: kvm-guest: setup async PF for cpu 0 Feb 12 20:23:52.794544 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Feb 12 20:23:52.794550 kernel: kvm-guest: PV spinlocks enabled Feb 12 20:23:52.794557 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Feb 12 20:23:52.794563 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Feb 12 20:23:52.794569 kernel: Policy zone: DMA32 Feb 12 20:23:52.794577 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 20:23:52.794585 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 12 20:23:52.794592 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 12 20:23:52.794598 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 12 20:23:52.794605 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 12 20:23:52.794611 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2275K rwdata, 13700K rodata, 45496K init, 4048K bss, 132728K reserved, 0K cma-reserved) Feb 12 20:23:52.794618 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 12 20:23:52.794624 kernel: ftrace: allocating 34475 entries in 135 pages Feb 12 20:23:52.794632 kernel: ftrace: allocated 135 pages with 4 groups Feb 12 20:23:52.794638 kernel: rcu: Hierarchical RCU implementation. Feb 12 20:23:52.794645 kernel: rcu: RCU event tracing is enabled. Feb 12 20:23:52.794651 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Feb 12 20:23:52.794658 kernel: Rude variant of Tasks RCU enabled. Feb 12 20:23:52.794664 kernel: Tracing variant of Tasks RCU enabled. Feb 12 20:23:52.794671 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 12 20:23:52.794677 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 12 20:23:52.794683 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Feb 12 20:23:52.794690 kernel: random: crng init done Feb 12 20:23:52.794697 kernel: Console: colour VGA+ 80x25 Feb 12 20:23:52.794704 kernel: printk: console [ttyS0] enabled Feb 12 20:23:52.794710 kernel: ACPI: Core revision 20210730 Feb 12 20:23:52.794717 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Feb 12 20:23:52.794723 kernel: APIC: Switch to symmetric I/O mode setup Feb 12 20:23:52.794729 kernel: x2apic enabled Feb 12 20:23:52.794736 kernel: Switched APIC routing to physical x2apic. Feb 12 20:23:52.794742 kernel: kvm-guest: setup PV IPIs Feb 12 20:23:52.794750 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Feb 12 20:23:52.794768 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Feb 12 20:23:52.794777 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Feb 12 20:23:52.794785 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Feb 12 20:23:52.794793 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Feb 12 20:23:52.794801 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Feb 12 20:23:52.794808 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 12 20:23:52.794814 kernel: Spectre V2 : Mitigation: Retpolines Feb 12 20:23:52.794821 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 12 20:23:52.794830 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Feb 12 20:23:52.794848 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Feb 12 20:23:52.794857 kernel: RETBleed: Mitigation: untrained return thunk Feb 12 20:23:52.794867 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Feb 12 20:23:52.794874 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Feb 12 20:23:52.794881 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Feb 12 20:23:52.794888 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Feb 12 20:23:52.794895 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Feb 12 20:23:52.794901 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Feb 12 20:23:52.794916 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Feb 12 20:23:52.794925 kernel: Freeing SMP alternatives memory: 32K Feb 12 20:23:52.794932 kernel: pid_max: default: 32768 minimum: 301 Feb 12 20:23:52.794938 kernel: LSM: Security Framework initializing Feb 12 20:23:52.794945 kernel: SELinux: Initializing. Feb 12 20:23:52.794952 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 12 20:23:52.794959 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 12 20:23:52.794966 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Feb 12 20:23:52.794974 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Feb 12 20:23:52.794980 kernel: ... version: 0 Feb 12 20:23:52.794987 kernel: ... bit width: 48 Feb 12 20:23:52.794994 kernel: ... generic registers: 6 Feb 12 20:23:52.795000 kernel: ... value mask: 0000ffffffffffff Feb 12 20:23:52.795007 kernel: ... max period: 00007fffffffffff Feb 12 20:23:52.795013 kernel: ... fixed-purpose events: 0 Feb 12 20:23:52.795020 kernel: ... event mask: 000000000000003f Feb 12 20:23:52.795027 kernel: signal: max sigframe size: 1776 Feb 12 20:23:52.795055 kernel: rcu: Hierarchical SRCU implementation. Feb 12 20:23:52.795062 kernel: smp: Bringing up secondary CPUs ... Feb 12 20:23:52.795068 kernel: x86: Booting SMP configuration: Feb 12 20:23:52.795075 kernel: .... node #0, CPUs: #1 Feb 12 20:23:52.795082 kernel: kvm-clock: cpu 1, msr 71faa041, secondary cpu clock Feb 12 20:23:52.795090 kernel: kvm-guest: setup async PF for cpu 1 Feb 12 20:23:52.795099 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Feb 12 20:23:52.795108 kernel: #2 Feb 12 20:23:52.795115 kernel: kvm-clock: cpu 2, msr 71faa081, secondary cpu clock Feb 12 20:23:52.795121 kernel: kvm-guest: setup async PF for cpu 2 Feb 12 20:23:52.795130 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Feb 12 20:23:52.795139 kernel: #3 Feb 12 20:23:52.795148 kernel: kvm-clock: cpu 3, msr 71faa0c1, secondary cpu clock Feb 12 20:23:52.795156 kernel: kvm-guest: setup async PF for cpu 3 Feb 12 20:23:52.795165 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Feb 12 20:23:52.795172 kernel: smp: Brought up 1 node, 4 CPUs Feb 12 20:23:52.795179 kernel: smpboot: Max logical packages: 1 Feb 12 20:23:52.795185 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Feb 12 20:23:52.795192 kernel: devtmpfs: initialized Feb 12 20:23:52.795200 kernel: x86/mm: Memory block size: 128MB Feb 12 20:23:52.795207 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 12 20:23:52.795214 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Feb 12 20:23:52.795221 kernel: pinctrl core: initialized pinctrl subsystem Feb 12 20:23:52.795228 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 12 20:23:52.795234 kernel: audit: initializing netlink subsys (disabled) Feb 12 20:23:52.795241 kernel: audit: type=2000 audit(1707769432.904:1): state=initialized audit_enabled=0 res=1 Feb 12 20:23:52.795248 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 12 20:23:52.795254 kernel: thermal_sys: Registered thermal governor 'user_space' Feb 12 20:23:52.795262 kernel: cpuidle: using governor menu Feb 12 20:23:52.795269 kernel: ACPI: bus type PCI registered Feb 12 20:23:52.795276 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 12 20:23:52.795282 kernel: dca service started, version 1.12.1 Feb 12 20:23:52.795289 kernel: PCI: Using configuration type 1 for base access Feb 12 20:23:52.795296 kernel: PCI: Using configuration type 1 for extended access Feb 12 20:23:52.795302 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Feb 12 20:23:52.795309 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 12 20:23:52.795316 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 12 20:23:52.795324 kernel: ACPI: Added _OSI(Module Device) Feb 12 20:23:52.795331 kernel: ACPI: Added _OSI(Processor Device) Feb 12 20:23:52.795338 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 12 20:23:52.795345 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 12 20:23:52.795351 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 12 20:23:52.795358 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 12 20:23:52.795365 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 12 20:23:52.795372 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 12 20:23:52.795379 kernel: ACPI: Interpreter enabled Feb 12 20:23:52.795387 kernel: ACPI: PM: (supports S0 S3 S5) Feb 12 20:23:52.795394 kernel: ACPI: Using IOAPIC for interrupt routing Feb 12 20:23:52.795400 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 12 20:23:52.795407 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Feb 12 20:23:52.795414 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 12 20:23:52.795540 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 12 20:23:52.795554 kernel: acpiphp: Slot [3] registered Feb 12 20:23:52.795562 kernel: acpiphp: Slot [4] registered Feb 12 20:23:52.795571 kernel: acpiphp: Slot [5] registered Feb 12 20:23:52.795578 kernel: acpiphp: Slot [6] registered Feb 12 20:23:52.795584 kernel: acpiphp: Slot [7] registered Feb 12 20:23:52.795591 kernel: acpiphp: Slot [8] registered Feb 12 20:23:52.795598 kernel: acpiphp: Slot [9] registered Feb 12 20:23:52.795604 kernel: acpiphp: Slot [10] registered Feb 12 20:23:52.795611 kernel: acpiphp: Slot [11] registered Feb 12 20:23:52.795618 kernel: acpiphp: Slot [12] registered Feb 12 20:23:52.795624 kernel: acpiphp: Slot [13] registered Feb 12 20:23:52.795631 kernel: acpiphp: Slot [14] registered Feb 12 20:23:52.795639 kernel: acpiphp: Slot [15] registered Feb 12 20:23:52.795646 kernel: acpiphp: Slot [16] registered Feb 12 20:23:52.795653 kernel: acpiphp: Slot [17] registered Feb 12 20:23:52.795659 kernel: acpiphp: Slot [18] registered Feb 12 20:23:52.795666 kernel: acpiphp: Slot [19] registered Feb 12 20:23:52.795672 kernel: acpiphp: Slot [20] registered Feb 12 20:23:52.795679 kernel: acpiphp: Slot [21] registered Feb 12 20:23:52.795686 kernel: acpiphp: Slot [22] registered Feb 12 20:23:52.795692 kernel: acpiphp: Slot [23] registered Feb 12 20:23:52.795706 kernel: acpiphp: Slot [24] registered Feb 12 20:23:52.795732 kernel: acpiphp: Slot [25] registered Feb 12 20:23:52.795745 kernel: acpiphp: Slot [26] registered Feb 12 20:23:52.795752 kernel: acpiphp: Slot [27] registered Feb 12 20:23:52.795760 kernel: acpiphp: Slot [28] registered Feb 12 20:23:52.795775 kernel: acpiphp: Slot [29] registered Feb 12 20:23:52.795790 kernel: acpiphp: Slot [30] registered Feb 12 20:23:52.795799 kernel: acpiphp: Slot [31] registered Feb 12 20:23:52.795806 kernel: PCI host bridge to bus 0000:00 Feb 12 20:23:52.795916 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 12 20:23:52.796004 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 12 20:23:52.796080 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 12 20:23:52.796142 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Feb 12 20:23:52.796202 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Feb 12 20:23:52.796260 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 12 20:23:52.796340 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Feb 12 20:23:52.796422 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Feb 12 20:23:52.796517 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Feb 12 20:23:52.797370 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Feb 12 20:23:52.797450 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Feb 12 20:23:52.797518 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Feb 12 20:23:52.797607 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Feb 12 20:23:52.797696 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Feb 12 20:23:52.797779 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Feb 12 20:23:52.797851 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Feb 12 20:23:52.797926 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Feb 12 20:23:52.798002 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Feb 12 20:23:52.798092 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Feb 12 20:23:52.798160 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Feb 12 20:23:52.798257 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Feb 12 20:23:52.798338 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 12 20:23:52.798414 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Feb 12 20:23:52.798514 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Feb 12 20:23:52.798593 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Feb 12 20:23:52.798702 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Feb 12 20:23:52.798809 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Feb 12 20:23:52.798916 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Feb 12 20:23:52.798990 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Feb 12 20:23:52.799126 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Feb 12 20:23:52.799252 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Feb 12 20:23:52.799367 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Feb 12 20:23:52.799457 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Feb 12 20:23:52.799555 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Feb 12 20:23:52.799653 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Feb 12 20:23:52.799666 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Feb 12 20:23:52.799675 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Feb 12 20:23:52.799683 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Feb 12 20:23:52.799691 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Feb 12 20:23:52.799700 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Feb 12 20:23:52.799709 kernel: iommu: Default domain type: Translated Feb 12 20:23:52.799718 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Feb 12 20:23:52.799815 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Feb 12 20:23:52.799934 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 12 20:23:52.800047 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Feb 12 20:23:52.800061 kernel: vgaarb: loaded Feb 12 20:23:52.800070 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 12 20:23:52.800079 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 12 20:23:52.800088 kernel: PTP clock support registered Feb 12 20:23:52.800097 kernel: PCI: Using ACPI for IRQ routing Feb 12 20:23:52.800106 kernel: PCI: pci_cache_line_size set to 64 bytes Feb 12 20:23:52.800119 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Feb 12 20:23:52.800128 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Feb 12 20:23:52.800137 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Feb 12 20:23:52.800145 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Feb 12 20:23:52.800154 kernel: clocksource: Switched to clocksource kvm-clock Feb 12 20:23:52.800163 kernel: VFS: Disk quotas dquot_6.6.0 Feb 12 20:23:52.800172 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 12 20:23:52.800180 kernel: pnp: PnP ACPI init Feb 12 20:23:52.800316 kernel: pnp 00:02: [dma 2] Feb 12 20:23:52.800335 kernel: pnp: PnP ACPI: found 6 devices Feb 12 20:23:52.800344 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 12 20:23:52.800354 kernel: NET: Registered PF_INET protocol family Feb 12 20:23:52.800363 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 12 20:23:52.800373 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 12 20:23:52.800382 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 12 20:23:52.800391 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 12 20:23:52.800414 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 12 20:23:52.800426 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 12 20:23:52.800436 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 12 20:23:52.800445 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 12 20:23:52.800454 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 12 20:23:52.800463 kernel: NET: Registered PF_XDP protocol family Feb 12 20:23:52.800577 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 12 20:23:52.800655 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 12 20:23:52.800730 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 12 20:23:52.800822 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Feb 12 20:23:52.800926 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Feb 12 20:23:52.801051 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Feb 12 20:23:52.801166 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Feb 12 20:23:52.801280 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Feb 12 20:23:52.801294 kernel: PCI: CLS 0 bytes, default 64 Feb 12 20:23:52.801304 kernel: Initialise system trusted keyrings Feb 12 20:23:52.801313 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 12 20:23:52.801322 kernel: Key type asymmetric registered Feb 12 20:23:52.801335 kernel: Asymmetric key parser 'x509' registered Feb 12 20:23:52.801358 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 12 20:23:52.801367 kernel: io scheduler mq-deadline registered Feb 12 20:23:52.801376 kernel: io scheduler kyber registered Feb 12 20:23:52.801385 kernel: io scheduler bfq registered Feb 12 20:23:52.801393 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Feb 12 20:23:52.801403 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Feb 12 20:23:52.801412 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Feb 12 20:23:52.801422 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Feb 12 20:23:52.801448 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 12 20:23:52.801458 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 12 20:23:52.801468 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Feb 12 20:23:52.801477 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Feb 12 20:23:52.801486 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Feb 12 20:23:52.801617 kernel: rtc_cmos 00:05: RTC can wake from S4 Feb 12 20:23:52.801634 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Feb 12 20:23:52.801754 kernel: rtc_cmos 00:05: registered as rtc0 Feb 12 20:23:52.801879 kernel: rtc_cmos 00:05: setting system clock to 2024-02-12T20:23:52 UTC (1707769432) Feb 12 20:23:52.802001 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Feb 12 20:23:52.802015 kernel: NET: Registered PF_INET6 protocol family Feb 12 20:23:52.802102 kernel: Segment Routing with IPv6 Feb 12 20:23:52.802113 kernel: In-situ OAM (IOAM) with IPv6 Feb 12 20:23:52.802123 kernel: NET: Registered PF_PACKET protocol family Feb 12 20:23:52.802145 kernel: Key type dns_resolver registered Feb 12 20:23:52.802155 kernel: IPI shorthand broadcast: enabled Feb 12 20:23:52.802164 kernel: sched_clock: Marking stable (356018348, 81251678)->(462999245, -25729219) Feb 12 20:23:52.802177 kernel: registered taskstats version 1 Feb 12 20:23:52.802186 kernel: Loading compiled-in X.509 certificates Feb 12 20:23:52.802195 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: 253e5c5c936b12e2ff2626e7f3214deb753330c8' Feb 12 20:23:52.802216 kernel: Key type .fscrypt registered Feb 12 20:23:52.802225 kernel: Key type fscrypt-provisioning registered Feb 12 20:23:52.802234 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 12 20:23:52.802243 kernel: ima: Allocated hash algorithm: sha1 Feb 12 20:23:52.802252 kernel: ima: No architecture policies found Feb 12 20:23:52.802277 kernel: Freeing unused kernel image (initmem) memory: 45496K Feb 12 20:23:52.802287 kernel: Write protecting the kernel read-only data: 28672k Feb 12 20:23:52.802296 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Feb 12 20:23:52.802304 kernel: Freeing unused kernel image (rodata/data gap) memory: 636K Feb 12 20:23:52.802313 kernel: Run /init as init process Feb 12 20:23:52.802322 kernel: with arguments: Feb 12 20:23:52.802344 kernel: /init Feb 12 20:23:52.802353 kernel: with environment: Feb 12 20:23:52.802376 kernel: HOME=/ Feb 12 20:23:52.802395 kernel: TERM=linux Feb 12 20:23:52.802410 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 12 20:23:52.802422 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 20:23:52.802435 systemd[1]: Detected virtualization kvm. Feb 12 20:23:52.802445 systemd[1]: Detected architecture x86-64. Feb 12 20:23:52.802467 systemd[1]: Running in initrd. Feb 12 20:23:52.802477 systemd[1]: No hostname configured, using default hostname. Feb 12 20:23:52.802490 systemd[1]: Hostname set to . Feb 12 20:23:52.802501 systemd[1]: Initializing machine ID from VM UUID. Feb 12 20:23:52.802524 systemd[1]: Queued start job for default target initrd.target. Feb 12 20:23:52.802534 systemd[1]: Started systemd-ask-password-console.path. Feb 12 20:23:52.802544 systemd[1]: Reached target cryptsetup.target. Feb 12 20:23:52.802554 systemd[1]: Reached target paths.target. Feb 12 20:23:52.802577 systemd[1]: Reached target slices.target. Feb 12 20:23:52.802588 systemd[1]: Reached target swap.target. Feb 12 20:23:52.802598 systemd[1]: Reached target timers.target. Feb 12 20:23:52.802613 systemd[1]: Listening on iscsid.socket. Feb 12 20:23:52.802623 systemd[1]: Listening on iscsiuio.socket. Feb 12 20:23:52.802633 systemd[1]: Listening on systemd-journald-audit.socket. Feb 12 20:23:52.802643 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 12 20:23:52.802653 systemd[1]: Listening on systemd-journald.socket. Feb 12 20:23:52.802663 systemd[1]: Listening on systemd-networkd.socket. Feb 12 20:23:52.802673 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 20:23:52.802686 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 20:23:52.802698 systemd[1]: Reached target sockets.target. Feb 12 20:23:52.802710 systemd[1]: Starting kmod-static-nodes.service... Feb 12 20:23:52.802721 systemd[1]: Finished network-cleanup.service. Feb 12 20:23:52.802731 systemd[1]: Starting systemd-fsck-usr.service... Feb 12 20:23:52.802741 systemd[1]: Starting systemd-journald.service... Feb 12 20:23:52.802752 systemd[1]: Starting systemd-modules-load.service... Feb 12 20:23:52.802763 systemd[1]: Starting systemd-resolved.service... Feb 12 20:23:52.802773 systemd[1]: Starting systemd-vconsole-setup.service... Feb 12 20:23:52.802783 systemd[1]: Finished kmod-static-nodes.service. Feb 12 20:23:52.802793 systemd[1]: Finished systemd-fsck-usr.service. Feb 12 20:23:52.802803 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 12 20:23:52.802813 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 12 20:23:52.802827 systemd-journald[197]: Journal started Feb 12 20:23:52.802884 systemd-journald[197]: Runtime Journal (/run/log/journal/74bc3c88c65241a59eb023cf7d1707f6) is 6.0M, max 48.5M, 42.5M free. Feb 12 20:23:52.791449 systemd-modules-load[198]: Inserted module 'overlay' Feb 12 20:23:52.824483 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 12 20:23:52.824519 kernel: Bridge firewalling registered Feb 12 20:23:52.824530 systemd[1]: Started systemd-journald.service. Feb 12 20:23:52.824541 kernel: audit: type=1130 audit(1707769432.821:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.812011 systemd-resolved[199]: Positive Trust Anchors: Feb 12 20:23:52.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.812021 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 20:23:52.828521 kernel: audit: type=1130 audit(1707769432.825:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.812062 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 20:23:52.814400 systemd-resolved[199]: Defaulting to hostname 'linux'. Feb 12 20:23:52.820845 systemd-modules-load[198]: Inserted module 'br_netfilter' Feb 12 20:23:52.825627 systemd[1]: Started systemd-resolved.service. Feb 12 20:23:52.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.834298 systemd[1]: Finished systemd-vconsole-setup.service. Feb 12 20:23:52.839392 kernel: audit: type=1130 audit(1707769432.833:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.839450 kernel: audit: type=1130 audit(1707769432.836:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.839497 systemd[1]: Reached target nss-lookup.target. Feb 12 20:23:52.841059 kernel: SCSI subsystem initialized Feb 12 20:23:52.841838 systemd[1]: Starting dracut-cmdline-ask.service... Feb 12 20:23:52.851334 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 12 20:23:52.851383 kernel: device-mapper: uevent: version 1.0.3 Feb 12 20:23:52.852731 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 12 20:23:52.854377 systemd[1]: Finished dracut-cmdline-ask.service. Feb 12 20:23:52.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.856820 systemd[1]: Starting dracut-cmdline.service... Feb 12 20:23:52.859479 kernel: audit: type=1130 audit(1707769432.855:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.858074 systemd-modules-load[198]: Inserted module 'dm_multipath' Feb 12 20:23:52.860382 systemd[1]: Finished systemd-modules-load.service. Feb 12 20:23:52.865117 kernel: audit: type=1130 audit(1707769432.861:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.862657 systemd[1]: Starting systemd-sysctl.service... Feb 12 20:23:52.866934 dracut-cmdline[218]: dracut-dracut-053 Feb 12 20:23:52.868133 dracut-cmdline[218]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=f2beb0668e3dab90bbcf0ace3803b7ee02142bfb86913ef12ef6d2ee81a411a4 Feb 12 20:23:52.873433 systemd[1]: Finished systemd-sysctl.service. Feb 12 20:23:52.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.877067 kernel: audit: type=1130 audit(1707769432.874:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.920062 kernel: Loading iSCSI transport class v2.0-870. Feb 12 20:23:52.930060 kernel: iscsi: registered transport (tcp) Feb 12 20:23:52.948061 kernel: iscsi: registered transport (qla4xxx) Feb 12 20:23:52.948086 kernel: QLogic iSCSI HBA Driver Feb 12 20:23:52.972552 systemd[1]: Finished dracut-cmdline.service. Feb 12 20:23:52.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:52.974397 systemd[1]: Starting dracut-pre-udev.service... Feb 12 20:23:52.976602 kernel: audit: type=1130 audit(1707769432.973:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.018062 kernel: raid6: avx2x4 gen() 27423 MB/s Feb 12 20:23:53.035053 kernel: raid6: avx2x4 xor() 8334 MB/s Feb 12 20:23:53.052052 kernel: raid6: avx2x2 gen() 32204 MB/s Feb 12 20:23:53.069054 kernel: raid6: avx2x2 xor() 18938 MB/s Feb 12 20:23:53.086053 kernel: raid6: avx2x1 gen() 22272 MB/s Feb 12 20:23:53.103055 kernel: raid6: avx2x1 xor() 14795 MB/s Feb 12 20:23:53.120051 kernel: raid6: sse2x4 gen() 14819 MB/s Feb 12 20:23:53.137053 kernel: raid6: sse2x4 xor() 7458 MB/s Feb 12 20:23:53.154056 kernel: raid6: sse2x2 gen() 16451 MB/s Feb 12 20:23:53.171052 kernel: raid6: sse2x2 xor() 9802 MB/s Feb 12 20:23:53.188061 kernel: raid6: sse2x1 gen() 11658 MB/s Feb 12 20:23:53.205168 kernel: raid6: sse2x1 xor() 6681 MB/s Feb 12 20:23:53.205206 kernel: raid6: using algorithm avx2x2 gen() 32204 MB/s Feb 12 20:23:53.205216 kernel: raid6: .... xor() 18938 MB/s, rmw enabled Feb 12 20:23:53.206109 kernel: raid6: using avx2x2 recovery algorithm Feb 12 20:23:53.218057 kernel: xor: automatically using best checksumming function avx Feb 12 20:23:53.308062 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Feb 12 20:23:53.315329 systemd[1]: Finished dracut-pre-udev.service. Feb 12 20:23:53.318598 kernel: audit: type=1130 audit(1707769433.315:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.318000 audit: BPF prog-id=7 op=LOAD Feb 12 20:23:53.318000 audit: BPF prog-id=8 op=LOAD Feb 12 20:23:53.318964 systemd[1]: Starting systemd-udevd.service... Feb 12 20:23:53.330477 systemd-udevd[399]: Using default interface naming scheme 'v252'. Feb 12 20:23:53.334687 systemd[1]: Started systemd-udevd.service. Feb 12 20:23:53.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.335503 systemd[1]: Starting dracut-pre-trigger.service... Feb 12 20:23:53.346576 dracut-pre-trigger[400]: rd.md=0: removing MD RAID activation Feb 12 20:23:53.370082 systemd[1]: Finished dracut-pre-trigger.service. Feb 12 20:23:53.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.371652 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 20:23:53.405171 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 20:23:53.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:53.440059 kernel: cryptd: max_cpu_qlen set to 1000 Feb 12 20:23:53.453062 kernel: AVX2 version of gcm_enc/dec engaged. Feb 12 20:23:53.453090 kernel: AES CTR mode by8 optimization enabled Feb 12 20:23:53.453100 kernel: libata version 3.00 loaded. Feb 12 20:23:53.457081 kernel: ata_piix 0000:00:01.1: version 2.13 Feb 12 20:23:53.460049 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Feb 12 20:23:53.460202 kernel: scsi host0: ata_piix Feb 12 20:23:53.461053 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 12 20:23:53.462360 kernel: GPT:9289727 != 19775487 Feb 12 20:23:53.462384 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 12 20:23:53.462397 kernel: GPT:9289727 != 19775487 Feb 12 20:23:53.463233 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 12 20:23:53.463257 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 12 20:23:53.464371 kernel: scsi host1: ata_piix Feb 12 20:23:53.465057 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Feb 12 20:23:53.466068 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Feb 12 20:23:53.631060 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Feb 12 20:23:53.633060 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Feb 12 20:23:53.646056 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (458) Feb 12 20:23:53.648628 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 12 20:23:53.648709 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 12 20:23:53.655831 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 12 20:23:53.663411 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 12 20:23:53.666363 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 20:23:53.667836 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Feb 12 20:23:53.668003 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Feb 12 20:23:53.667361 systemd[1]: Starting disk-uuid.service... Feb 12 20:23:53.688056 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Feb 12 20:23:53.824843 disk-uuid[533]: Primary Header is updated. Feb 12 20:23:53.824843 disk-uuid[533]: Secondary Entries is updated. Feb 12 20:23:53.824843 disk-uuid[533]: Secondary Header is updated. Feb 12 20:23:53.827595 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 12 20:23:53.831048 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 12 20:23:54.831057 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 12 20:23:54.831393 disk-uuid[536]: The operation has completed successfully. Feb 12 20:23:54.852888 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 12 20:23:54.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:54.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:54.852968 systemd[1]: Finished disk-uuid.service. Feb 12 20:23:54.856528 systemd[1]: Starting verity-setup.service... Feb 12 20:23:54.868051 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Feb 12 20:23:54.883597 systemd[1]: Found device dev-mapper-usr.device. Feb 12 20:23:54.885794 systemd[1]: Mounting sysusr-usr.mount... Feb 12 20:23:54.887742 systemd[1]: Finished verity-setup.service. Feb 12 20:23:54.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:54.941055 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 12 20:23:54.941341 systemd[1]: Mounted sysusr-usr.mount. Feb 12 20:23:54.942427 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 12 20:23:54.943922 systemd[1]: Starting ignition-setup.service... Feb 12 20:23:54.945422 systemd[1]: Starting parse-ip-for-networkd.service... Feb 12 20:23:54.952176 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 12 20:23:54.952202 kernel: BTRFS info (device vda6): using free space tree Feb 12 20:23:54.952215 kernel: BTRFS info (device vda6): has skinny extents Feb 12 20:23:54.959363 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 12 20:23:54.966992 systemd[1]: Finished ignition-setup.service. Feb 12 20:23:54.968431 systemd[1]: Starting ignition-fetch-offline.service... Feb 12 20:23:54.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.001209 ignition[636]: Ignition 2.14.0 Feb 12 20:23:55.001238 ignition[636]: Stage: fetch-offline Feb 12 20:23:55.001293 ignition[636]: no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:55.001303 ignition[636]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:55.001421 ignition[636]: parsed url from cmdline: "" Feb 12 20:23:55.001425 ignition[636]: no config URL provided Feb 12 20:23:55.001431 ignition[636]: reading system config file "/usr/lib/ignition/user.ign" Feb 12 20:23:55.001440 ignition[636]: no config at "/usr/lib/ignition/user.ign" Feb 12 20:23:55.001465 ignition[636]: op(1): [started] loading QEMU firmware config module Feb 12 20:23:55.001470 ignition[636]: op(1): executing: "modprobe" "qemu_fw_cfg" Feb 12 20:23:55.007568 ignition[636]: op(1): [finished] loading QEMU firmware config module Feb 12 20:23:55.009749 systemd[1]: Finished parse-ip-for-networkd.service. Feb 12 20:23:55.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.011000 audit: BPF prog-id=9 op=LOAD Feb 12 20:23:55.011653 systemd[1]: Starting systemd-networkd.service... Feb 12 20:23:55.065055 ignition[636]: parsing config with SHA512: 4b835aff1ed8d2836befc862c26328896aefb64bb1eac4c6894dfc7311faf1de164993691e6e3a22e7105ddb3dd328d75128963d62f95bc84d538bddc7fb32b6 Feb 12 20:23:55.085871 systemd-networkd[713]: lo: Link UP Feb 12 20:23:55.085882 systemd-networkd[713]: lo: Gained carrier Feb 12 20:23:55.086372 systemd-networkd[713]: Enumeration completed Feb 12 20:23:55.086584 systemd-networkd[713]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 20:23:55.087152 systemd[1]: Started systemd-networkd.service. Feb 12 20:23:55.087429 systemd-networkd[713]: eth0: Link UP Feb 12 20:23:55.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.087434 systemd-networkd[713]: eth0: Gained carrier Feb 12 20:23:55.088221 systemd[1]: Reached target network.target. Feb 12 20:23:55.091140 systemd[1]: Starting iscsiuio.service... Feb 12 20:23:55.094593 systemd[1]: Started iscsiuio.service. Feb 12 20:23:55.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.096274 systemd[1]: Starting iscsid.service... Feb 12 20:23:55.098625 iscsid[720]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 12 20:23:55.098625 iscsid[720]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 12 20:23:55.098625 iscsid[720]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 12 20:23:55.098625 iscsid[720]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 12 20:23:55.098625 iscsid[720]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 12 20:23:55.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.107091 iscsid[720]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 12 20:23:55.101115 systemd-networkd[713]: eth0: DHCPv4 address 10.0.0.74/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 12 20:23:55.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.102756 ignition[636]: fetch-offline: fetch-offline passed Feb 12 20:23:55.102121 unknown[636]: fetched base config from "system" Feb 12 20:23:55.102808 ignition[636]: Ignition finished successfully Feb 12 20:23:55.102129 unknown[636]: fetched user config from "qemu" Feb 12 20:23:55.102997 systemd[1]: Started iscsid.service. Feb 12 20:23:55.104110 systemd[1]: Starting dracut-initqueue.service... Feb 12 20:23:55.106969 systemd[1]: Finished ignition-fetch-offline.service. Feb 12 20:23:55.109333 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 12 20:23:55.114016 systemd[1]: Starting ignition-kargs.service... Feb 12 20:23:55.115238 systemd[1]: Finished dracut-initqueue.service. Feb 12 20:23:55.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.116351 systemd[1]: Reached target remote-fs-pre.target. Feb 12 20:23:55.117538 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 20:23:55.118680 systemd[1]: Reached target remote-fs.target. Feb 12 20:23:55.120210 systemd[1]: Starting dracut-pre-mount.service... Feb 12 20:23:55.123467 ignition[729]: Ignition 2.14.0 Feb 12 20:23:55.123475 ignition[729]: Stage: kargs Feb 12 20:23:55.123577 ignition[729]: no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:55.123586 ignition[729]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:55.126431 ignition[729]: kargs: kargs passed Feb 12 20:23:55.126466 ignition[729]: Ignition finished successfully Feb 12 20:23:55.127470 systemd[1]: Finished dracut-pre-mount.service. Feb 12 20:23:55.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.129596 systemd[1]: Finished ignition-kargs.service. Feb 12 20:23:55.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.130685 systemd[1]: Starting ignition-disks.service... Feb 12 20:23:55.136481 ignition[740]: Ignition 2.14.0 Feb 12 20:23:55.136489 ignition[740]: Stage: disks Feb 12 20:23:55.136562 ignition[740]: no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:55.136571 ignition[740]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:55.137596 ignition[740]: disks: disks passed Feb 12 20:23:55.137623 ignition[740]: Ignition finished successfully Feb 12 20:23:55.140046 systemd[1]: Finished ignition-disks.service. Feb 12 20:23:55.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.140175 systemd[1]: Reached target initrd-root-device.target. Feb 12 20:23:55.141170 systemd[1]: Reached target local-fs-pre.target. Feb 12 20:23:55.141378 systemd[1]: Reached target local-fs.target. Feb 12 20:23:55.141596 systemd[1]: Reached target sysinit.target. Feb 12 20:23:55.141810 systemd[1]: Reached target basic.target. Feb 12 20:23:55.142634 systemd[1]: Starting systemd-fsck-root.service... Feb 12 20:23:55.152055 systemd-fsck[748]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 12 20:23:55.156679 systemd[1]: Finished systemd-fsck-root.service. Feb 12 20:23:55.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.158826 systemd[1]: Mounting sysroot.mount... Feb 12 20:23:55.164056 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 12 20:23:55.164481 systemd[1]: Mounted sysroot.mount. Feb 12 20:23:55.164571 systemd[1]: Reached target initrd-root-fs.target. Feb 12 20:23:55.166917 systemd[1]: Mounting sysroot-usr.mount... Feb 12 20:23:55.167266 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 12 20:23:55.167299 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 12 20:23:55.167318 systemd[1]: Reached target ignition-diskful.target. Feb 12 20:23:55.169236 systemd[1]: Mounted sysroot-usr.mount. Feb 12 20:23:55.170857 systemd[1]: Starting initrd-setup-root.service... Feb 12 20:23:55.176462 initrd-setup-root[758]: cut: /sysroot/etc/passwd: No such file or directory Feb 12 20:23:55.179906 initrd-setup-root[766]: cut: /sysroot/etc/group: No such file or directory Feb 12 20:23:55.182409 initrd-setup-root[774]: cut: /sysroot/etc/shadow: No such file or directory Feb 12 20:23:55.185576 initrd-setup-root[782]: cut: /sysroot/etc/gshadow: No such file or directory Feb 12 20:23:55.206305 systemd[1]: Finished initrd-setup-root.service. Feb 12 20:23:55.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.208171 systemd[1]: Starting ignition-mount.service... Feb 12 20:23:55.209703 systemd[1]: Starting sysroot-boot.service... Feb 12 20:23:55.213509 bash[799]: umount: /sysroot/usr/share/oem: not mounted. Feb 12 20:23:55.220723 ignition[801]: INFO : Ignition 2.14.0 Feb 12 20:23:55.220723 ignition[801]: INFO : Stage: mount Feb 12 20:23:55.222541 ignition[801]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:55.222541 ignition[801]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:55.222541 ignition[801]: INFO : mount: mount passed Feb 12 20:23:55.222541 ignition[801]: INFO : Ignition finished successfully Feb 12 20:23:55.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.222641 systemd[1]: Finished ignition-mount.service. Feb 12 20:23:55.227168 systemd[1]: Finished sysroot-boot.service. Feb 12 20:23:55.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:55.892857 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 12 20:23:55.898320 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (809) Feb 12 20:23:55.898346 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Feb 12 20:23:55.898356 kernel: BTRFS info (device vda6): using free space tree Feb 12 20:23:55.899363 kernel: BTRFS info (device vda6): has skinny extents Feb 12 20:23:55.902344 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 12 20:23:55.904287 systemd[1]: Starting ignition-files.service... Feb 12 20:23:55.916375 ignition[829]: INFO : Ignition 2.14.0 Feb 12 20:23:55.916375 ignition[829]: INFO : Stage: files Feb 12 20:23:55.917715 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:55.917715 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:55.920519 ignition[829]: DEBUG : files: compiled without relabeling support, skipping Feb 12 20:23:55.921865 ignition[829]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 12 20:23:55.921865 ignition[829]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 12 20:23:55.924458 ignition[829]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 12 20:23:55.925724 ignition[829]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 12 20:23:55.927284 unknown[829]: wrote ssh authorized keys file for user: core Feb 12 20:23:55.928147 ignition[829]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 12 20:23:55.929337 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Feb 12 20:23:55.929337 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Feb 12 20:23:56.294264 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 12 20:23:56.428272 ignition[829]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Feb 12 20:23:56.430470 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Feb 12 20:23:56.430470 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Feb 12 20:23:56.430470 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Feb 12 20:23:56.503254 systemd-networkd[713]: eth0: Gained IPv6LL Feb 12 20:23:56.731604 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 12 20:23:56.811208 ignition[829]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Feb 12 20:23:56.813364 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Feb 12 20:23:56.813364 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 12 20:23:56.813364 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Feb 12 20:23:56.833507 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 12 20:23:56.891368 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Feb 12 20:23:56.892973 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 12 20:23:56.892973 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Feb 12 20:23:56.956525 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 12 20:23:57.110855 ignition[829]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Feb 12 20:23:57.110855 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 12 20:23:57.114005 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 12 20:23:57.114005 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Feb 12 20:23:57.157702 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 12 20:23:57.599653 ignition[829]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Feb 12 20:23:57.599653 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 12 20:23:57.602930 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 12 20:23:57.602930 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Feb 12 20:23:57.646958 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 12 20:23:57.797751 ignition[829]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 20:23:57.800243 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 20:23:57.800243 ignition[829]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Feb 12 20:23:57.800243 ignition[829]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 20:23:57.800243 ignition[829]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 20:23:57.800243 ignition[829]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(15): [started] processing unit "coreos-metadata.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(15): op(16): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(15): op(16): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(15): [finished] processing unit "coreos-metadata.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(17): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(18): [started] setting preset to enabled for "prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-critools.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Feb 12 20:23:57.835871 ignition[829]: INFO : files: op(1a): [started] setting preset to disabled for "coreos-metadata.service" Feb 12 20:23:57.887895 ignition[829]: INFO : files: op(1a): op(1b): [started] removing enablement symlink(s) for "coreos-metadata.service" Feb 12 20:23:57.887895 ignition[829]: INFO : files: op(1a): op(1b): [finished] removing enablement symlink(s) for "coreos-metadata.service" Feb 12 20:23:57.887895 ignition[829]: INFO : files: op(1a): [finished] setting preset to disabled for "coreos-metadata.service" Feb 12 20:23:57.887895 ignition[829]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 12 20:23:57.891904 ignition[829]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 12 20:23:57.891904 ignition[829]: INFO : files: files passed Feb 12 20:23:57.891904 ignition[829]: INFO : Ignition finished successfully Feb 12 20:23:57.894834 systemd[1]: Finished ignition-files.service. Feb 12 20:23:57.898752 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 12 20:23:57.898783 kernel: audit: type=1130 audit(1707769437.895:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.898803 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 12 20:23:57.899427 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 12 20:23:57.899943 systemd[1]: Starting ignition-quench.service... Feb 12 20:23:57.902342 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 12 20:23:57.907938 kernel: audit: type=1130 audit(1707769437.903:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.907953 kernel: audit: type=1131 audit(1707769437.903:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.902411 systemd[1]: Finished ignition-quench.service. Feb 12 20:23:57.910828 initrd-setup-root-after-ignition[854]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Feb 12 20:23:57.937322 initrd-setup-root-after-ignition[856]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 12 20:23:57.938655 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 12 20:23:57.942479 kernel: audit: type=1130 audit(1707769437.938:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.938756 systemd[1]: Reached target ignition-complete.target. Feb 12 20:23:57.942942 systemd[1]: Starting initrd-parse-etc.service... Feb 12 20:23:57.954176 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 12 20:23:57.954246 systemd[1]: Finished initrd-parse-etc.service. Feb 12 20:23:57.960219 kernel: audit: type=1130 audit(1707769437.955:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.960235 kernel: audit: type=1131 audit(1707769437.955:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.955453 systemd[1]: Reached target initrd-fs.target. Feb 12 20:23:57.960222 systemd[1]: Reached target initrd.target. Feb 12 20:23:57.960759 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 12 20:23:57.961303 systemd[1]: Starting dracut-pre-pivot.service... Feb 12 20:23:57.969141 systemd[1]: Finished dracut-pre-pivot.service. Feb 12 20:23:57.993065 kernel: audit: type=1130 audit(1707769437.990:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.990697 systemd[1]: Starting initrd-cleanup.service... Feb 12 20:23:57.998918 systemd[1]: Stopped target nss-lookup.target. Feb 12 20:23:58.014857 kernel: audit: type=1131 audit(1707769437.999:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.014872 kernel: audit: type=1131 audit(1707769438.005:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.014881 kernel: audit: type=1131 audit(1707769438.008:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:57.999074 systemd[1]: Stopped target remote-cryptsetup.target. Feb 12 20:23:57.999395 systemd[1]: Stopped target timers.target. Feb 12 20:23:57.999607 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 12 20:23:57.999705 systemd[1]: Stopped dracut-pre-pivot.service. Feb 12 20:23:58.000025 systemd[1]: Stopped target initrd.target. Feb 12 20:23:58.002263 systemd[1]: Stopped target basic.target. Feb 12 20:23:58.002574 systemd[1]: Stopped target ignition-complete.target. Feb 12 20:23:58.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.002802 systemd[1]: Stopped target ignition-diskful.target. Feb 12 20:23:58.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.003011 systemd[1]: Stopped target initrd-root-device.target. Feb 12 20:23:58.003362 systemd[1]: Stopped target remote-fs.target. Feb 12 20:23:58.003748 systemd[1]: Stopped target remote-fs-pre.target. Feb 12 20:23:58.004391 systemd[1]: Stopped target sysinit.target. Feb 12 20:23:58.004699 systemd[1]: Stopped target local-fs.target. Feb 12 20:23:58.004925 systemd[1]: Stopped target local-fs-pre.target. Feb 12 20:23:58.028497 ignition[869]: INFO : Ignition 2.14.0 Feb 12 20:23:58.028497 ignition[869]: INFO : Stage: umount Feb 12 20:23:58.028497 ignition[869]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 12 20:23:58.028497 ignition[869]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 12 20:23:58.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.005248 systemd[1]: Stopped target swap.target. Feb 12 20:23:58.032626 ignition[869]: INFO : umount: umount passed Feb 12 20:23:58.032626 ignition[869]: INFO : Ignition finished successfully Feb 12 20:23:58.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.005429 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 12 20:23:58.005545 systemd[1]: Stopped dracut-pre-mount.service. Feb 12 20:23:58.005763 systemd[1]: Stopped target cryptsetup.target. Feb 12 20:23:58.008219 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 12 20:23:58.008322 systemd[1]: Stopped dracut-initqueue.service. Feb 12 20:23:58.008592 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 12 20:23:58.008687 systemd[1]: Stopped ignition-fetch-offline.service. Feb 12 20:23:58.010838 systemd[1]: Stopped target paths.target. Feb 12 20:23:58.011066 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 12 20:23:58.016069 systemd[1]: Stopped systemd-ask-password-console.path. Feb 12 20:23:58.016760 systemd[1]: Stopped target slices.target. Feb 12 20:23:58.017850 systemd[1]: Stopped target sockets.target. Feb 12 20:23:58.018854 systemd[1]: iscsid.socket: Deactivated successfully. Feb 12 20:23:58.018935 systemd[1]: Closed iscsid.socket. Feb 12 20:23:58.019805 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 12 20:23:58.019906 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 12 20:23:58.020928 systemd[1]: ignition-files.service: Deactivated successfully. Feb 12 20:23:58.021024 systemd[1]: Stopped ignition-files.service. Feb 12 20:23:58.022582 systemd[1]: Stopping ignition-mount.service... Feb 12 20:23:58.023712 systemd[1]: Stopping iscsiuio.service... Feb 12 20:23:58.025204 systemd[1]: Stopping sysroot-boot.service... Feb 12 20:23:58.027940 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 12 20:23:58.028524 systemd[1]: Stopped systemd-udev-trigger.service. Feb 12 20:23:58.030675 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 12 20:23:58.031484 systemd[1]: Stopped dracut-pre-trigger.service. Feb 12 20:23:58.048515 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 12 20:23:58.049544 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 12 20:23:58.050152 systemd[1]: Stopped iscsiuio.service. Feb 12 20:23:58.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.051330 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 12 20:23:58.051959 systemd[1]: Stopped ignition-mount.service. Feb 12 20:23:58.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.053184 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 12 20:23:58.053796 systemd[1]: Stopped sysroot-boot.service. Feb 12 20:23:58.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.055042 systemd[1]: Stopped target network.target. Feb 12 20:23:58.056068 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 12 20:23:58.056606 systemd[1]: Closed iscsiuio.socket. Feb 12 20:23:58.057587 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 12 20:23:58.058187 systemd[1]: Stopped ignition-disks.service. Feb 12 20:23:58.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.059195 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 12 20:23:58.059223 systemd[1]: Stopped ignition-kargs.service. Feb 12 20:23:58.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.060787 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 12 20:23:58.060815 systemd[1]: Stopped ignition-setup.service. Feb 12 20:23:58.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.062403 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 12 20:23:58.062430 systemd[1]: Stopped initrd-setup-root.service. Feb 12 20:23:58.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.064189 systemd[1]: Stopping systemd-networkd.service... Feb 12 20:23:58.065364 systemd[1]: Stopping systemd-resolved.service... Feb 12 20:23:58.066542 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 12 20:23:58.067181 systemd[1]: Finished initrd-cleanup.service. Feb 12 20:23:58.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.075086 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 12 20:23:58.075739 systemd[1]: Stopped systemd-resolved.service. Feb 12 20:23:58.076070 systemd-networkd[713]: eth0: DHCPv6 lease lost Feb 12 20:23:58.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.077774 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 12 20:23:58.078440 systemd[1]: Stopped systemd-networkd.service. Feb 12 20:23:58.079000 audit: BPF prog-id=6 op=UNLOAD Feb 12 20:23:58.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.079828 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 12 20:23:58.079853 systemd[1]: Closed systemd-networkd.socket. Feb 12 20:23:58.081925 systemd[1]: Stopping network-cleanup.service... Feb 12 20:23:58.082934 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 12 20:23:58.083000 audit: BPF prog-id=9 op=UNLOAD Feb 12 20:23:58.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.082970 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 12 20:23:58.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.084281 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 12 20:23:58.084313 systemd[1]: Stopped systemd-sysctl.service. Feb 12 20:23:58.085558 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 12 20:23:58.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.086164 systemd[1]: Stopped systemd-modules-load.service. Feb 12 20:23:58.089150 systemd[1]: Stopping systemd-udevd.service... Feb 12 20:23:58.091291 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 12 20:23:58.093192 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 12 20:23:58.094012 systemd[1]: Stopped systemd-udevd.service. Feb 12 20:23:58.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.095431 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 12 20:23:58.096089 systemd[1]: Stopped network-cleanup.service. Feb 12 20:23:58.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.097245 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 12 20:23:58.097890 systemd[1]: Closed systemd-udevd-control.socket. Feb 12 20:23:58.098984 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 12 20:23:58.099008 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 12 20:23:58.100719 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 12 20:23:58.101328 systemd[1]: Stopped dracut-pre-udev.service. Feb 12 20:23:58.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.102372 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 12 20:23:58.102959 systemd[1]: Stopped dracut-cmdline.service. Feb 12 20:23:58.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.103967 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 12 20:23:58.104731 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 12 20:23:58.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.111814 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 12 20:23:58.113112 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 12 20:23:58.113157 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 12 20:23:58.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.115408 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 12 20:23:58.115448 systemd[1]: Stopped kmod-static-nodes.service. Feb 12 20:23:58.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.117190 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 12 20:23:58.117228 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 12 20:23:58.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.119619 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 12 20:23:58.120978 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 12 20:23:58.121781 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 12 20:23:58.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.123284 systemd[1]: Reached target initrd-switch-root.target. Feb 12 20:23:58.125159 systemd[1]: Starting initrd-switch-root.service... Feb 12 20:23:58.140836 systemd[1]: Switching root. Feb 12 20:23:58.160320 iscsid[720]: iscsid shutting down. Feb 12 20:23:58.160839 systemd-journald[197]: Journal stopped Feb 12 20:24:01.162051 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Feb 12 20:24:01.162105 kernel: SELinux: Class mctp_socket not defined in policy. Feb 12 20:24:01.162124 kernel: SELinux: Class anon_inode not defined in policy. Feb 12 20:24:01.162138 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 12 20:24:01.162152 kernel: SELinux: policy capability network_peer_controls=1 Feb 12 20:24:01.162165 kernel: SELinux: policy capability open_perms=1 Feb 12 20:24:01.162179 kernel: SELinux: policy capability extended_socket_class=1 Feb 12 20:24:01.162193 kernel: SELinux: policy capability always_check_network=0 Feb 12 20:24:01.162206 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 12 20:24:01.162220 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 12 20:24:01.162240 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 12 20:24:01.162254 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 12 20:24:01.162269 systemd[1]: Successfully loaded SELinux policy in 34.916ms. Feb 12 20:24:01.162298 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.429ms. Feb 12 20:24:01.162315 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 20:24:01.162330 systemd[1]: Detected virtualization kvm. Feb 12 20:24:01.162344 systemd[1]: Detected architecture x86-64. Feb 12 20:24:01.162363 systemd[1]: Detected first boot. Feb 12 20:24:01.162379 systemd[1]: Initializing machine ID from VM UUID. Feb 12 20:24:01.162393 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 12 20:24:01.162406 systemd[1]: Populated /etc with preset unit settings. Feb 12 20:24:01.162421 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:24:01.162440 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:24:01.162455 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:24:01.162469 systemd[1]: iscsid.service: Deactivated successfully. Feb 12 20:24:01.162483 systemd[1]: Stopped iscsid.service. Feb 12 20:24:01.162499 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 12 20:24:01.162513 systemd[1]: Stopped initrd-switch-root.service. Feb 12 20:24:01.162527 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 12 20:24:01.162541 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 12 20:24:01.162556 systemd[1]: Created slice system-addon\x2drun.slice. Feb 12 20:24:01.162570 systemd[1]: Created slice system-getty.slice. Feb 12 20:24:01.162585 systemd[1]: Created slice system-modprobe.slice. Feb 12 20:24:01.162599 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 12 20:24:01.162613 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 12 20:24:01.162629 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 12 20:24:01.162644 systemd[1]: Created slice user.slice. Feb 12 20:24:01.162658 systemd[1]: Started systemd-ask-password-console.path. Feb 12 20:24:01.162673 systemd[1]: Started systemd-ask-password-wall.path. Feb 12 20:24:01.162695 systemd[1]: Set up automount boot.automount. Feb 12 20:24:01.162710 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 12 20:24:01.162724 systemd[1]: Stopped target initrd-switch-root.target. Feb 12 20:24:01.162740 systemd[1]: Stopped target initrd-fs.target. Feb 12 20:24:01.162754 systemd[1]: Stopped target initrd-root-fs.target. Feb 12 20:24:01.162768 systemd[1]: Reached target integritysetup.target. Feb 12 20:24:01.162782 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 20:24:01.162795 systemd[1]: Reached target remote-fs.target. Feb 12 20:24:01.162809 systemd[1]: Reached target slices.target. Feb 12 20:24:01.162823 systemd[1]: Reached target swap.target. Feb 12 20:24:01.162837 systemd[1]: Reached target torcx.target. Feb 12 20:24:01.162851 systemd[1]: Reached target veritysetup.target. Feb 12 20:24:01.162865 systemd[1]: Listening on systemd-coredump.socket. Feb 12 20:24:01.162880 systemd[1]: Listening on systemd-initctl.socket. Feb 12 20:24:01.162895 systemd[1]: Listening on systemd-networkd.socket. Feb 12 20:24:01.162909 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 20:24:01.162922 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 20:24:01.162936 systemd[1]: Listening on systemd-userdbd.socket. Feb 12 20:24:01.162951 systemd[1]: Mounting dev-hugepages.mount... Feb 12 20:24:01.162964 systemd[1]: Mounting dev-mqueue.mount... Feb 12 20:24:01.162979 systemd[1]: Mounting media.mount... Feb 12 20:24:01.162993 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 12 20:24:01.163009 systemd[1]: Mounting sys-kernel-debug.mount... Feb 12 20:24:01.163023 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 12 20:24:01.163048 systemd[1]: Mounting tmp.mount... Feb 12 20:24:01.163063 systemd[1]: Starting flatcar-tmpfiles.service... Feb 12 20:24:01.163077 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 12 20:24:01.163092 systemd[1]: Starting kmod-static-nodes.service... Feb 12 20:24:01.163106 systemd[1]: Starting modprobe@configfs.service... Feb 12 20:24:01.163120 systemd[1]: Starting modprobe@dm_mod.service... Feb 12 20:24:01.163137 systemd[1]: Starting modprobe@drm.service... Feb 12 20:24:01.163153 systemd[1]: Starting modprobe@efi_pstore.service... Feb 12 20:24:01.163168 systemd[1]: Starting modprobe@fuse.service... Feb 12 20:24:01.163182 systemd[1]: Starting modprobe@loop.service... Feb 12 20:24:01.163197 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 12 20:24:01.163211 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 12 20:24:01.163225 systemd[1]: Stopped systemd-fsck-root.service. Feb 12 20:24:01.163239 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 12 20:24:01.163253 systemd[1]: Stopped systemd-fsck-usr.service. Feb 12 20:24:01.163267 systemd[1]: Stopped systemd-journald.service. Feb 12 20:24:01.163283 kernel: fuse: init (API version 7.34) Feb 12 20:24:01.163296 kernel: loop: module loaded Feb 12 20:24:01.163310 systemd[1]: Starting systemd-journald.service... Feb 12 20:24:01.163325 systemd[1]: Starting systemd-modules-load.service... Feb 12 20:24:01.163339 systemd[1]: Starting systemd-network-generator.service... Feb 12 20:24:01.163353 systemd[1]: Starting systemd-remount-fs.service... Feb 12 20:24:01.163367 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 20:24:01.163380 systemd[1]: verity-setup.service: Deactivated successfully. Feb 12 20:24:01.163394 systemd[1]: Stopped verity-setup.service. Feb 12 20:24:01.163412 systemd-journald[987]: Journal started Feb 12 20:24:01.163462 systemd-journald[987]: Runtime Journal (/run/log/journal/74bc3c88c65241a59eb023cf7d1707f6) is 6.0M, max 48.5M, 42.5M free. Feb 12 20:23:58.213000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 12 20:23:58.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 20:23:58.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 20:23:58.852000 audit: BPF prog-id=10 op=LOAD Feb 12 20:23:58.852000 audit: BPF prog-id=10 op=UNLOAD Feb 12 20:23:58.852000 audit: BPF prog-id=11 op=LOAD Feb 12 20:23:58.852000 audit: BPF prog-id=11 op=UNLOAD Feb 12 20:23:58.889000 audit[902]: AVC avc: denied { associate } for pid=902 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 12 20:23:58.889000 audit[902]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878dc a1=c00002ae40 a2=c000029b00 a3=32 items=0 ppid=885 pid=902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.889000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 20:23:58.891000 audit[902]: AVC avc: denied { associate } for pid=902 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 12 20:23:58.891000 audit[902]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879b5 a2=1ed a3=0 items=2 ppid=885 pid=902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.891000 audit: CWD cwd="/" Feb 12 20:23:58.891000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:23:58.891000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:23:58.891000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 20:24:01.062000 audit: BPF prog-id=12 op=LOAD Feb 12 20:24:01.062000 audit: BPF prog-id=3 op=UNLOAD Feb 12 20:24:01.062000 audit: BPF prog-id=13 op=LOAD Feb 12 20:24:01.062000 audit: BPF prog-id=14 op=LOAD Feb 12 20:24:01.062000 audit: BPF prog-id=4 op=UNLOAD Feb 12 20:24:01.062000 audit: BPF prog-id=5 op=UNLOAD Feb 12 20:24:01.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.072000 audit: BPF prog-id=12 op=UNLOAD Feb 12 20:24:01.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.148000 audit: BPF prog-id=15 op=LOAD Feb 12 20:24:01.148000 audit: BPF prog-id=16 op=LOAD Feb 12 20:24:01.148000 audit: BPF prog-id=17 op=LOAD Feb 12 20:24:01.148000 audit: BPF prog-id=13 op=UNLOAD Feb 12 20:24:01.148000 audit: BPF prog-id=14 op=UNLOAD Feb 12 20:24:01.160000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 12 20:24:01.160000 audit[987]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffe3bc9a980 a2=4000 a3=7ffe3bc9aa1c items=0 ppid=1 pid=987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:01.160000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 12 20:24:01.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:58.887744 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:24:01.060077 systemd[1]: Queued start job for default target multi-user.target. Feb 12 20:23:58.888134 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 20:24:01.060090 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 12 20:24:01.165101 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Feb 12 20:23:58.888186 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 20:24:01.063577 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 12 20:23:58.888220 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 12 20:23:58.888230 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 12 20:23:58.888264 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 12 20:23:58.888279 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 12 20:23:58.888498 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 12 20:23:58.888536 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 20:23:58.888546 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 20:23:58.888897 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 12 20:23:58.888928 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 12 20:23:58.888947 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 12 20:23:58.888966 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 12 20:23:58.888986 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 12 20:23:58.889003 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:23:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 12 20:24:00.801898 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:24:00.802142 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:24:00.802229 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:24:00.802378 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:24:00.802423 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 12 20:24:00.802473 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-02-12T20:24:00Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 12 20:24:01.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.168067 systemd[1]: Started systemd-journald.service. Feb 12 20:24:01.168087 systemd[1]: Mounted dev-hugepages.mount. Feb 12 20:24:01.168734 systemd[1]: Mounted dev-mqueue.mount. Feb 12 20:24:01.169362 systemd[1]: Mounted media.mount. Feb 12 20:24:01.169937 systemd[1]: Mounted sys-kernel-debug.mount. Feb 12 20:24:01.170615 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 12 20:24:01.171290 systemd[1]: Mounted tmp.mount. Feb 12 20:24:01.171993 systemd[1]: Finished flatcar-tmpfiles.service. Feb 12 20:24:01.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.172855 systemd[1]: Finished kmod-static-nodes.service. Feb 12 20:24:01.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.173671 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 12 20:24:01.173842 systemd[1]: Finished modprobe@configfs.service. Feb 12 20:24:01.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.174733 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 12 20:24:01.174872 systemd[1]: Finished modprobe@dm_mod.service. Feb 12 20:24:01.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.175719 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 12 20:24:01.175859 systemd[1]: Finished modprobe@drm.service. Feb 12 20:24:01.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.176796 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 12 20:24:01.176944 systemd[1]: Finished modprobe@efi_pstore.service. Feb 12 20:24:01.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.177846 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 12 20:24:01.177988 systemd[1]: Finished modprobe@fuse.service. Feb 12 20:24:01.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.178880 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 12 20:24:01.179000 systemd[1]: Finished modprobe@loop.service. Feb 12 20:24:01.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.179831 systemd[1]: Finished systemd-modules-load.service. Feb 12 20:24:01.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.180748 systemd[1]: Finished systemd-network-generator.service. Feb 12 20:24:01.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.181849 systemd[1]: Finished systemd-remount-fs.service. Feb 12 20:24:01.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.182908 systemd[1]: Reached target network-pre.target. Feb 12 20:24:01.184727 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 12 20:24:01.186454 systemd[1]: Mounting sys-kernel-config.mount... Feb 12 20:24:01.187206 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 12 20:24:01.188355 systemd[1]: Starting systemd-hwdb-update.service... Feb 12 20:24:01.189934 systemd[1]: Starting systemd-journal-flush.service... Feb 12 20:24:01.190625 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 12 20:24:01.194149 systemd-journald[987]: Time spent on flushing to /var/log/journal/74bc3c88c65241a59eb023cf7d1707f6 is 22.835ms for 1118 entries. Feb 12 20:24:01.194149 systemd-journald[987]: System Journal (/var/log/journal/74bc3c88c65241a59eb023cf7d1707f6) is 8.0M, max 195.6M, 187.6M free. Feb 12 20:24:01.236177 systemd-journald[987]: Received client request to flush runtime journal. Feb 12 20:24:01.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.191356 systemd[1]: Starting systemd-random-seed.service... Feb 12 20:24:01.192204 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 12 20:24:01.193066 systemd[1]: Starting systemd-sysctl.service... Feb 12 20:24:01.195531 systemd[1]: Starting systemd-sysusers.service... Feb 12 20:24:01.198957 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 12 20:24:01.237791 udevadm[1006]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 12 20:24:01.200228 systemd[1]: Mounted sys-kernel-config.mount. Feb 12 20:24:01.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.201353 systemd[1]: Finished systemd-random-seed.service. Feb 12 20:24:01.202333 systemd[1]: Reached target first-boot-complete.target. Feb 12 20:24:01.203883 systemd[1]: Finished systemd-sysctl.service. Feb 12 20:24:01.214734 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 20:24:01.216997 systemd[1]: Starting systemd-udev-settle.service... Feb 12 20:24:01.218584 systemd[1]: Finished systemd-sysusers.service. Feb 12 20:24:01.220612 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 12 20:24:01.237212 systemd[1]: Finished systemd-journal-flush.service. Feb 12 20:24:01.240891 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 12 20:24:01.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.789100 systemd[1]: Finished systemd-hwdb-update.service. Feb 12 20:24:01.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.790000 audit: BPF prog-id=18 op=LOAD Feb 12 20:24:01.790000 audit: BPF prog-id=19 op=LOAD Feb 12 20:24:01.790000 audit: BPF prog-id=7 op=UNLOAD Feb 12 20:24:01.790000 audit: BPF prog-id=8 op=UNLOAD Feb 12 20:24:01.790850 systemd[1]: Starting systemd-udevd.service... Feb 12 20:24:01.804537 systemd-udevd[1010]: Using default interface naming scheme 'v252'. Feb 12 20:24:01.815761 systemd[1]: Started systemd-udevd.service. Feb 12 20:24:01.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.817000 audit: BPF prog-id=20 op=LOAD Feb 12 20:24:01.817985 systemd[1]: Starting systemd-networkd.service... Feb 12 20:24:01.850000 audit: BPF prog-id=21 op=LOAD Feb 12 20:24:01.850000 audit: BPF prog-id=22 op=LOAD Feb 12 20:24:01.850000 audit: BPF prog-id=23 op=LOAD Feb 12 20:24:01.851201 systemd[1]: Starting systemd-userdbd.service... Feb 12 20:24:01.868213 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 12 20:24:01.890501 systemd[1]: Started systemd-userdbd.service. Feb 12 20:24:01.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.908069 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Feb 12 20:24:01.913098 kernel: ACPI: button: Power Button [PWRF] Feb 12 20:24:01.925000 audit[1012]: AVC avc: denied { confidentiality } for pid=1012 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Feb 12 20:24:01.925000 audit[1012]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5614425a7d90 a1=32194 a2=7f368185dbc5 a3=5 items=108 ppid=1010 pid=1012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:01.925000 audit: CWD cwd="/" Feb 12 20:24:01.925000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=1 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=2 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=3 name=(null) inode=13942 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=4 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=5 name=(null) inode=13943 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=6 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=7 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=8 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=9 name=(null) inode=13945 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=10 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=11 name=(null) inode=13946 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=12 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=13 name=(null) inode=13947 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=14 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=15 name=(null) inode=13948 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=16 name=(null) inode=13944 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=17 name=(null) inode=13949 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=18 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=19 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=20 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=21 name=(null) inode=13951 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=22 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=23 name=(null) inode=13952 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=24 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=25 name=(null) inode=13953 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=26 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=27 name=(null) inode=13954 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=28 name=(null) inode=13950 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=29 name=(null) inode=13955 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=30 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=31 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=32 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=33 name=(null) inode=13957 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=34 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=35 name=(null) inode=13958 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=36 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=37 name=(null) inode=13959 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=38 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=39 name=(null) inode=13960 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=40 name=(null) inode=13956 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=41 name=(null) inode=13961 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=42 name=(null) inode=13941 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=43 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=44 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=45 name=(null) inode=13963 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=46 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=47 name=(null) inode=13964 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=48 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=49 name=(null) inode=13965 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=50 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=51 name=(null) inode=13966 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=52 name=(null) inode=13962 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=53 name=(null) inode=13967 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=55 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=56 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=57 name=(null) inode=13969 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=58 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=59 name=(null) inode=13970 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=60 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=61 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=62 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=63 name=(null) inode=13972 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=64 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=65 name=(null) inode=13973 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=66 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=67 name=(null) inode=13974 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=68 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=69 name=(null) inode=13975 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=70 name=(null) inode=13971 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=71 name=(null) inode=13976 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=72 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=73 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=74 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=75 name=(null) inode=13978 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=76 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=77 name=(null) inode=13979 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=78 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=79 name=(null) inode=13980 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=80 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=81 name=(null) inode=13981 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=82 name=(null) inode=13977 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=83 name=(null) inode=13982 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=84 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=85 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=86 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=87 name=(null) inode=13984 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=88 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=89 name=(null) inode=13985 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=90 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=91 name=(null) inode=13986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=92 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=93 name=(null) inode=13987 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=94 name=(null) inode=13983 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=95 name=(null) inode=13988 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=96 name=(null) inode=13968 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=97 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=98 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=99 name=(null) inode=13990 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=100 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=101 name=(null) inode=13991 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=102 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=103 name=(null) inode=13992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=104 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=105 name=(null) inode=13993 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=106 name=(null) inode=13989 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PATH item=107 name=(null) inode=13994 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:01.925000 audit: PROCTITLE proctitle="(udev-worker)" Feb 12 20:24:01.940755 systemd-networkd[1018]: lo: Link UP Feb 12 20:24:01.940758 systemd-networkd[1018]: lo: Gained carrier Feb 12 20:24:01.941093 systemd-networkd[1018]: Enumeration completed Feb 12 20:24:01.941167 systemd-networkd[1018]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 20:24:01.941451 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 20:24:01.942051 systemd-networkd[1018]: eth0: Link UP Feb 12 20:24:01.942055 systemd-networkd[1018]: eth0: Gained carrier Feb 12 20:24:01.942648 systemd[1]: Started systemd-networkd.service. Feb 12 20:24:01.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:01.949089 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Feb 12 20:24:01.954158 systemd-networkd[1018]: eth0: DHCPv4 address 10.0.0.74/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 12 20:24:01.959056 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Feb 12 20:24:01.961060 kernel: mousedev: PS/2 mouse device common for all mice Feb 12 20:24:02.008654 kernel: kvm: Nested Virtualization enabled Feb 12 20:24:02.008726 kernel: SVM: kvm: Nested Paging enabled Feb 12 20:24:02.008740 kernel: SVM: Virtual VMLOAD VMSAVE supported Feb 12 20:24:02.008753 kernel: SVM: Virtual GIF supported Feb 12 20:24:02.024073 kernel: EDAC MC: Ver: 3.0.0 Feb 12 20:24:02.073390 systemd[1]: Finished systemd-udev-settle.service. Feb 12 20:24:02.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.075061 systemd[1]: Starting lvm2-activation-early.service... Feb 12 20:24:02.081864 lvm[1045]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 20:24:02.108767 systemd[1]: Finished lvm2-activation-early.service. Feb 12 20:24:02.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.109535 systemd[1]: Reached target cryptsetup.target. Feb 12 20:24:02.111246 systemd[1]: Starting lvm2-activation.service... Feb 12 20:24:02.115084 lvm[1046]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 20:24:02.142942 systemd[1]: Finished lvm2-activation.service. Feb 12 20:24:02.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.143676 systemd[1]: Reached target local-fs-pre.target. Feb 12 20:24:02.144238 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 12 20:24:02.144261 systemd[1]: Reached target local-fs.target. Feb 12 20:24:02.144783 systemd[1]: Reached target machines.target. Feb 12 20:24:02.146378 systemd[1]: Starting ldconfig.service... Feb 12 20:24:02.147116 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 12 20:24:02.147163 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:24:02.147942 systemd[1]: Starting systemd-boot-update.service... Feb 12 20:24:02.149289 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 12 20:24:02.150790 systemd[1]: Starting systemd-machine-id-commit.service... Feb 12 20:24:02.151491 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 12 20:24:02.151526 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 12 20:24:02.152254 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 12 20:24:02.153143 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1048 (bootctl) Feb 12 20:24:02.153929 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 12 20:24:02.157558 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 12 20:24:02.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.168461 systemd-tmpfiles[1051]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 12 20:24:02.169404 systemd-tmpfiles[1051]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 12 20:24:02.170525 systemd-tmpfiles[1051]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 12 20:24:02.188694 systemd-fsck[1056]: fsck.fat 4.2 (2021-01-31) Feb 12 20:24:02.188694 systemd-fsck[1056]: /dev/vda1: 789 files, 115339/258078 clusters Feb 12 20:24:02.190502 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 12 20:24:02.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.192938 systemd[1]: Mounting boot.mount... Feb 12 20:24:02.203398 systemd[1]: Mounted boot.mount. Feb 12 20:24:02.809791 systemd[1]: Finished systemd-boot-update.service. Feb 12 20:24:02.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.842368 ldconfig[1047]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 12 20:24:02.855046 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 12 20:24:02.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.859532 systemd[1]: Starting audit-rules.service... Feb 12 20:24:02.860891 systemd[1]: Starting clean-ca-certificates.service... Feb 12 20:24:02.862339 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 12 20:24:02.863000 audit: BPF prog-id=24 op=LOAD Feb 12 20:24:02.865000 audit: BPF prog-id=25 op=LOAD Feb 12 20:24:02.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.864342 systemd[1]: Starting systemd-resolved.service... Feb 12 20:24:02.866010 systemd[1]: Starting systemd-timesyncd.service... Feb 12 20:24:02.867333 systemd[1]: Starting systemd-update-utmp.service... Feb 12 20:24:02.868255 systemd[1]: Finished clean-ca-certificates.service. Feb 12 20:24:02.869180 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 12 20:24:02.871000 audit[1070]: SYSTEM_BOOT pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 12 20:24:02.873971 systemd[1]: Finished systemd-update-utmp.service. Feb 12 20:24:02.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:03.393330 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 12 20:24:03.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:03.395156 systemd[1]: Started systemd-timesyncd.service. Feb 12 20:24:03.395869 systemd-resolved[1063]: Positive Trust Anchors: Feb 12 20:24:03.395884 systemd-resolved[1063]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 20:24:03.395911 systemd-resolved[1063]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 20:24:03.397482 kernel: kauditd_printk_skb: 231 callbacks suppressed Feb 12 20:24:03.397540 kernel: audit: type=1130 audit(1707769443.394:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:04.180295 kernel: audit: type=1130 audit(1707769444.176:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:04.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:04.177514 systemd-timesyncd[1067]: Contacted time server 10.0.0.1:123 (10.0.0.1). Feb 12 20:24:04.177549 systemd-timesyncd[1067]: Initial clock synchronization to Mon 2024-02-12 20:24:04.176787 UTC. Feb 12 20:24:04.177714 systemd[1]: Reached target time-set.target. Feb 12 20:24:04.181744 systemd-resolved[1063]: Defaulting to hostname 'linux'. Feb 12 20:24:04.182991 systemd[1]: Started systemd-resolved.service. Feb 12 20:24:04.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:04.183678 systemd[1]: Reached target network.target. Feb 12 20:24:04.184742 augenrules[1080]: No rules Feb 12 20:24:04.182000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 12 20:24:04.182000 audit[1080]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeab762f70 a2=420 a3=0 items=0 ppid=1059 pid=1080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:04.182000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 12 20:24:04.187232 kernel: audit: type=1130 audit(1707769444.182:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:04.187264 kernel: audit: type=1305 audit(1707769444.182:158): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 12 20:24:04.187291 kernel: audit: type=1300 audit(1707769444.182:158): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeab762f70 a2=420 a3=0 items=0 ppid=1059 pid=1080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:04.187308 kernel: audit: type=1327 audit(1707769444.182:158): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 12 20:24:04.192047 systemd[1]: Reached target nss-lookup.target. Feb 12 20:24:04.192910 systemd[1]: Finished audit-rules.service. Feb 12 20:24:04.514422 systemd-networkd[1018]: eth0: Gained IPv6LL Feb 12 20:24:04.531247 systemd[1]: Finished ldconfig.service. Feb 12 20:24:04.533335 systemd[1]: Starting systemd-update-done.service... Feb 12 20:24:04.539944 systemd[1]: Finished systemd-update-done.service. Feb 12 20:24:04.540773 systemd[1]: Reached target sysinit.target. Feb 12 20:24:04.541463 systemd[1]: Started motdgen.path. Feb 12 20:24:04.542076 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 12 20:24:04.543115 systemd[1]: Started logrotate.timer. Feb 12 20:24:04.543940 systemd[1]: Started mdadm.timer. Feb 12 20:24:04.544589 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 12 20:24:04.545367 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 12 20:24:04.545399 systemd[1]: Reached target paths.target. Feb 12 20:24:04.545982 systemd[1]: Reached target timers.target. Feb 12 20:24:04.546817 systemd[1]: Listening on dbus.socket. Feb 12 20:24:04.548157 systemd[1]: Starting docker.socket... Feb 12 20:24:04.550475 systemd[1]: Listening on sshd.socket. Feb 12 20:24:04.551108 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:24:04.552159 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 12 20:24:04.552581 systemd[1]: Finished systemd-machine-id-commit.service. Feb 12 20:24:04.553361 systemd[1]: Listening on docker.socket. Feb 12 20:24:04.554018 systemd[1]: Reached target sockets.target. Feb 12 20:24:04.554604 systemd[1]: Reached target basic.target. Feb 12 20:24:04.555188 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 20:24:04.555206 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 20:24:04.555892 systemd[1]: Starting containerd.service... Feb 12 20:24:04.557053 systemd[1]: Starting dbus.service... Feb 12 20:24:04.558446 systemd[1]: Starting enable-oem-cloudinit.service... Feb 12 20:24:04.560292 systemd[1]: Starting extend-filesystems.service... Feb 12 20:24:04.561211 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 12 20:24:04.562186 systemd[1]: Starting motdgen.service... Feb 12 20:24:04.564052 systemd[1]: Starting prepare-cni-plugins.service... Feb 12 20:24:04.565308 jq[1092]: false Feb 12 20:24:04.566042 systemd[1]: Starting prepare-critools.service... Feb 12 20:24:04.567464 systemd[1]: Starting prepare-helm.service... Feb 12 20:24:04.569063 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 12 20:24:04.572438 systemd[1]: Starting sshd-keygen.service... Feb 12 20:24:04.575057 extend-filesystems[1093]: Found sr0 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda1 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda2 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda3 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found usr Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda4 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda6 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda7 Feb 12 20:24:04.575057 extend-filesystems[1093]: Found vda9 Feb 12 20:24:04.575057 extend-filesystems[1093]: Checking size of /dev/vda9 Feb 12 20:24:04.577781 dbus-daemon[1091]: [system] SELinux support is enabled Feb 12 20:24:04.575697 systemd[1]: Starting systemd-logind.service... Feb 12 20:24:04.614424 extend-filesystems[1093]: Resized partition /dev/vda9 Feb 12 20:24:04.619419 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Feb 12 20:24:04.576382 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:24:04.619638 extend-filesystems[1131]: resize2fs 1.46.5 (30-Dec-2021) Feb 12 20:24:04.576432 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 12 20:24:04.576882 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 12 20:24:04.620965 jq[1114]: true Feb 12 20:24:04.577605 systemd[1]: Starting update-engine.service... Feb 12 20:24:04.579441 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 12 20:24:04.621449 tar[1116]: ./ Feb 12 20:24:04.621449 tar[1116]: ./macvlan Feb 12 20:24:04.580442 systemd[1]: Started dbus.service. Feb 12 20:24:04.621743 tar[1118]: crictl Feb 12 20:24:04.584138 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 12 20:24:04.622035 tar[1119]: linux-amd64/helm Feb 12 20:24:04.584339 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 12 20:24:04.622378 jq[1126]: true Feb 12 20:24:04.584617 systemd[1]: motdgen.service: Deactivated successfully. Feb 12 20:24:04.584768 systemd[1]: Finished motdgen.service. Feb 12 20:24:04.588181 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 12 20:24:04.588602 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 12 20:24:04.607059 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 12 20:24:04.607076 systemd[1]: Reached target system-config.target. Feb 12 20:24:04.607743 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 12 20:24:04.607763 systemd[1]: Reached target user-config.target. Feb 12 20:24:04.627638 update_engine[1112]: I0212 20:24:04.627496 1112 main.cc:92] Flatcar Update Engine starting Feb 12 20:24:04.629339 systemd[1]: Started update-engine.service. Feb 12 20:24:04.633501 update_engine[1112]: I0212 20:24:04.629405 1112 update_check_scheduler.cc:74] Next update check in 4m10s Feb 12 20:24:04.631330 systemd[1]: Started locksmithd.service. Feb 12 20:24:04.641764 systemd-logind[1109]: Watching system buttons on /dev/input/event1 (Power Button) Feb 12 20:24:04.642084 systemd-logind[1109]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Feb 12 20:24:04.642556 systemd-logind[1109]: New seat seat0. Feb 12 20:24:04.646386 systemd[1]: Started systemd-logind.service. Feb 12 20:24:04.649297 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Feb 12 20:24:04.698388 locksmithd[1149]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 12 20:24:05.454637 extend-filesystems[1131]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 12 20:24:05.454637 extend-filesystems[1131]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 12 20:24:05.454637 extend-filesystems[1131]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Feb 12 20:24:05.486809 extend-filesystems[1093]: Resized filesystem in /dev/vda9 Feb 12 20:24:05.483710 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 12 20:24:05.487861 env[1127]: time="2024-02-12T20:24:05.455721742Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 12 20:24:05.487861 env[1127]: time="2024-02-12T20:24:05.479107477Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 12 20:24:05.487861 env[1127]: time="2024-02-12T20:24:05.479229446Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.483887 systemd[1]: Finished extend-filesystems.service. Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488393305Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488426447Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488644276Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488663732Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488678249Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488689721Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488765683Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.488995374Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.489124667Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:24:05.489324 env[1127]: time="2024-02-12T20:24:05.489141999Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 12 20:24:05.489608 env[1127]: time="2024-02-12T20:24:05.489189689Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 12 20:24:05.489608 env[1127]: time="2024-02-12T20:24:05.489202032Z" level=info msg="metadata content store policy set" policy=shared Feb 12 20:24:05.499593 tar[1116]: ./static Feb 12 20:24:05.505448 sshd_keygen[1117]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 12 20:24:05.522792 tar[1116]: ./vlan Feb 12 20:24:05.526072 systemd[1]: Finished sshd-keygen.service. Feb 12 20:24:05.528220 systemd[1]: Starting issuegen.service... Feb 12 20:24:05.533675 systemd[1]: issuegen.service: Deactivated successfully. Feb 12 20:24:05.533854 systemd[1]: Finished issuegen.service. Feb 12 20:24:05.535773 systemd[1]: Starting systemd-user-sessions.service... Feb 12 20:24:05.540927 systemd[1]: Finished systemd-user-sessions.service. Feb 12 20:24:05.542891 systemd[1]: Started getty@tty1.service. Feb 12 20:24:05.544369 systemd[1]: Started serial-getty@ttyS0.service. Feb 12 20:24:05.545224 systemd[1]: Reached target getty.target. Feb 12 20:24:05.555704 tar[1116]: ./portmap Feb 12 20:24:05.584827 tar[1116]: ./host-local Feb 12 20:24:05.610120 tar[1116]: ./vrf Feb 12 20:24:05.637705 tar[1116]: ./bridge Feb 12 20:24:05.671570 tar[1116]: ./tuning Feb 12 20:24:05.671913 bash[1148]: Updated "/home/core/.ssh/authorized_keys" Feb 12 20:24:05.672868 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693488124Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693550742Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693580968Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693648555Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693663122Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693675616Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693707706Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693720159Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693731801Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693743042Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693819796Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693853079Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.693993522Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 12 20:24:05.697751 env[1127]: time="2024-02-12T20:24:05.694077129Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 12 20:24:05.696550 systemd[1]: Started containerd.service. Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694373635Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694397330Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694408651Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694463133Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694475366Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694486397Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694496245Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694559093Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694572438Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694593658Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694603777Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694615499Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694726978Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694752786Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698167 env[1127]: time="2024-02-12T20:24:05.694763897Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698453 env[1127]: time="2024-02-12T20:24:05.694774216Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 12 20:24:05.698453 env[1127]: time="2024-02-12T20:24:05.694787291Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 12 20:24:05.698453 env[1127]: time="2024-02-12T20:24:05.694797210Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 12 20:24:05.698453 env[1127]: time="2024-02-12T20:24:05.694825082Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 12 20:24:05.698453 env[1127]: time="2024-02-12T20:24:05.694866700Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695063649Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695143399Z" level=info msg="Connect containerd service" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695167224Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695755176Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695862909Z" level=info msg="Start subscribing containerd event" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.695897423Z" level=info msg="Start recovering state" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696035813Z" level=info msg="Start event monitor" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696070207Z" level=info msg="Start snapshots syncer" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696077772Z" level=info msg="Start cni network conf syncer for default" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696085185Z" level=info msg="Start streaming server" Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696371312Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 12 20:24:05.698551 env[1127]: time="2024-02-12T20:24:05.696403853Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 12 20:24:05.702115 tar[1116]: ./firewall Feb 12 20:24:05.705788 env[1127]: time="2024-02-12T20:24:05.705711211Z" level=info msg="containerd successfully booted in 1.049889s" Feb 12 20:24:05.738033 tar[1116]: ./host-device Feb 12 20:24:05.773028 tar[1116]: ./sbr Feb 12 20:24:05.803192 tar[1116]: ./loopback Feb 12 20:24:05.805643 systemd[1]: Finished prepare-critools.service. Feb 12 20:24:05.826677 tar[1116]: ./dhcp Feb 12 20:24:05.826952 tar[1119]: linux-amd64/LICENSE Feb 12 20:24:05.827258 tar[1119]: linux-amd64/README.md Feb 12 20:24:05.831087 systemd[1]: Finished prepare-helm.service. Feb 12 20:24:05.895807 tar[1116]: ./ptp Feb 12 20:24:05.924729 tar[1116]: ./ipvlan Feb 12 20:24:05.952672 tar[1116]: ./bandwidth Feb 12 20:24:05.986509 systemd[1]: Finished prepare-cni-plugins.service. Feb 12 20:24:05.987536 systemd[1]: Reached target multi-user.target. Feb 12 20:24:05.989116 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 12 20:24:05.994216 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 12 20:24:05.994368 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 12 20:24:05.995419 systemd[1]: Startup finished in 519ms (kernel) + 5.508s (initrd) + 7.038s (userspace) = 13.067s. Feb 12 20:24:13.702470 systemd[1]: Created slice system-sshd.slice. Feb 12 20:24:13.703701 systemd[1]: Started sshd@0-10.0.0.74:22-10.0.0.1:60042.service. Feb 12 20:24:13.938454 sshd[1181]: Accepted publickey for core from 10.0.0.1 port 60042 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:13.968606 sshd[1181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.052443 systemd-logind[1109]: New session 1 of user core. Feb 12 20:24:14.055529 systemd[1]: Created slice user-500.slice. Feb 12 20:24:14.066306 systemd[1]: Starting user-runtime-dir@500.service... Feb 12 20:24:14.079170 systemd[1]: Finished user-runtime-dir@500.service. Feb 12 20:24:14.080970 systemd[1]: Starting user@500.service... Feb 12 20:24:14.100803 (systemd)[1184]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.306967 systemd[1184]: Queued start job for default target default.target. Feb 12 20:24:14.308225 systemd[1184]: Reached target paths.target. Feb 12 20:24:14.309314 systemd[1184]: Reached target sockets.target. Feb 12 20:24:14.310647 systemd[1184]: Reached target timers.target. Feb 12 20:24:14.310967 systemd[1184]: Reached target basic.target. Feb 12 20:24:14.311030 systemd[1184]: Reached target default.target. Feb 12 20:24:14.311065 systemd[1184]: Startup finished in 194ms. Feb 12 20:24:14.311210 systemd[1]: Started user@500.service. Feb 12 20:24:14.314122 systemd[1]: Started session-1.scope. Feb 12 20:24:14.379754 systemd[1]: Started sshd@1-10.0.0.74:22-10.0.0.1:60044.service. Feb 12 20:24:14.443705 sshd[1193]: Accepted publickey for core from 10.0.0.1 port 60044 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:14.445528 sshd[1193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.450223 systemd-logind[1109]: New session 2 of user core. Feb 12 20:24:14.451104 systemd[1]: Started session-2.scope. Feb 12 20:24:14.508002 sshd[1193]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:14.510911 systemd[1]: sshd@1-10.0.0.74:22-10.0.0.1:60044.service: Deactivated successfully. Feb 12 20:24:14.511515 systemd[1]: session-2.scope: Deactivated successfully. Feb 12 20:24:14.512027 systemd-logind[1109]: Session 2 logged out. Waiting for processes to exit. Feb 12 20:24:14.513257 systemd[1]: Started sshd@2-10.0.0.74:22-10.0.0.1:34826.service. Feb 12 20:24:14.513968 systemd-logind[1109]: Removed session 2. Feb 12 20:24:14.551991 sshd[1199]: Accepted publickey for core from 10.0.0.1 port 34826 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:14.553612 sshd[1199]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.557717 systemd-logind[1109]: New session 3 of user core. Feb 12 20:24:14.558775 systemd[1]: Started session-3.scope. Feb 12 20:24:14.611198 sshd[1199]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:14.614200 systemd[1]: sshd@2-10.0.0.74:22-10.0.0.1:34826.service: Deactivated successfully. Feb 12 20:24:14.614812 systemd[1]: session-3.scope: Deactivated successfully. Feb 12 20:24:14.615338 systemd-logind[1109]: Session 3 logged out. Waiting for processes to exit. Feb 12 20:24:14.616493 systemd[1]: Started sshd@3-10.0.0.74:22-10.0.0.1:34830.service. Feb 12 20:24:14.617175 systemd-logind[1109]: Removed session 3. Feb 12 20:24:14.653673 sshd[1205]: Accepted publickey for core from 10.0.0.1 port 34830 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:14.654942 sshd[1205]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.658690 systemd-logind[1109]: New session 4 of user core. Feb 12 20:24:14.659671 systemd[1]: Started session-4.scope. Feb 12 20:24:14.711855 sshd[1205]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:14.714642 systemd[1]: sshd@3-10.0.0.74:22-10.0.0.1:34830.service: Deactivated successfully. Feb 12 20:24:14.715183 systemd[1]: session-4.scope: Deactivated successfully. Feb 12 20:24:14.715724 systemd-logind[1109]: Session 4 logged out. Waiting for processes to exit. Feb 12 20:24:14.716653 systemd[1]: Started sshd@4-10.0.0.74:22-10.0.0.1:34832.service. Feb 12 20:24:14.717271 systemd-logind[1109]: Removed session 4. Feb 12 20:24:14.753001 sshd[1211]: Accepted publickey for core from 10.0.0.1 port 34832 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:14.754309 sshd[1211]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.757515 systemd-logind[1109]: New session 5 of user core. Feb 12 20:24:14.758188 systemd[1]: Started session-5.scope. Feb 12 20:24:14.811529 sudo[1214]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 12 20:24:14.811691 sudo[1214]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:24:14.824507 dbus-daemon[1091]: \xd0-H\xe0[U: received setenforce notice (enforcing=777979648) Feb 12 20:24:14.826575 sudo[1214]: pam_unix(sudo:session): session closed for user root Feb 12 20:24:14.828008 sshd[1211]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:14.831580 systemd[1]: Started sshd@5-10.0.0.74:22-10.0.0.1:34848.service. Feb 12 20:24:14.832091 systemd[1]: sshd@4-10.0.0.74:22-10.0.0.1:34832.service: Deactivated successfully. Feb 12 20:24:14.832572 systemd[1]: session-5.scope: Deactivated successfully. Feb 12 20:24:14.833156 systemd-logind[1109]: Session 5 logged out. Waiting for processes to exit. Feb 12 20:24:14.834200 systemd-logind[1109]: Removed session 5. Feb 12 20:24:14.870390 sshd[1217]: Accepted publickey for core from 10.0.0.1 port 34848 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:14.871746 sshd[1217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:14.875051 systemd-logind[1109]: New session 6 of user core. Feb 12 20:24:14.875840 systemd[1]: Started session-6.scope. Feb 12 20:24:14.927675 sudo[1222]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 12 20:24:14.927832 sudo[1222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:24:14.930434 sudo[1222]: pam_unix(sudo:session): session closed for user root Feb 12 20:24:14.934506 sudo[1221]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 12 20:24:14.934720 sudo[1221]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:24:14.942483 systemd[1]: Stopping audit-rules.service... Feb 12 20:24:14.942000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 20:24:14.943715 auditctl[1225]: No rules Feb 12 20:24:14.944054 systemd[1]: audit-rules.service: Deactivated successfully. Feb 12 20:24:14.944226 systemd[1]: Stopped audit-rules.service. Feb 12 20:24:14.942000 audit[1225]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda36e0c10 a2=420 a3=0 items=0 ppid=1 pid=1225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:14.945720 systemd[1]: Starting audit-rules.service... Feb 12 20:24:14.949324 kernel: audit: type=1305 audit(1707769454.942:159): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 20:24:14.949398 kernel: audit: type=1300 audit(1707769454.942:159): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffda36e0c10 a2=420 a3=0 items=0 ppid=1 pid=1225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:14.949415 kernel: audit: type=1327 audit(1707769454.942:159): proctitle=2F7362696E2F617564697463746C002D44 Feb 12 20:24:14.942000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 12 20:24:14.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.954545 kernel: audit: type=1131 audit(1707769454.942:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.962270 augenrules[1242]: No rules Feb 12 20:24:14.962909 systemd[1]: Finished audit-rules.service. Feb 12 20:24:14.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.965441 sudo[1221]: pam_unix(sudo:session): session closed for user root Feb 12 20:24:14.964000 audit[1221]: USER_END pid=1221 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.966689 sshd[1217]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:14.969372 systemd[1]: sshd@5-10.0.0.74:22-10.0.0.1:34848.service: Deactivated successfully. Feb 12 20:24:14.969568 kernel: audit: type=1130 audit(1707769454.961:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.969627 kernel: audit: type=1106 audit(1707769454.964:162): pid=1221 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.969656 kernel: audit: type=1104 audit(1707769454.964:163): pid=1221 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.964000 audit[1221]: CRED_DISP pid=1221 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.969816 systemd[1]: session-6.scope: Deactivated successfully. Feb 12 20:24:14.970411 systemd-logind[1109]: Session 6 logged out. Waiting for processes to exit. Feb 12 20:24:14.971270 systemd[1]: Started sshd@6-10.0.0.74:22-10.0.0.1:34860.service. Feb 12 20:24:14.972194 systemd-logind[1109]: Removed session 6. Feb 12 20:24:14.966000 audit[1217]: USER_END pid=1217 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:14.976199 kernel: audit: type=1106 audit(1707769454.966:164): pid=1217 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:14.976244 kernel: audit: type=1104 audit(1707769454.966:165): pid=1217 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:14.966000 audit[1217]: CRED_DISP pid=1217 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:14.979314 kernel: audit: type=1131 audit(1707769454.968:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.74:22-10.0.0.1:34848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.74:22-10.0.0.1:34848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:14.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.74:22-10.0.0.1:34860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:15.009000 audit[1248]: USER_ACCT pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:15.011155 sshd[1248]: Accepted publickey for core from 10.0.0.1 port 34860 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:24:15.010000 audit[1248]: CRED_ACQ pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:15.010000 audit[1248]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1421df70 a2=3 a3=0 items=0 ppid=1 pid=1248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.010000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:15.012146 sshd[1248]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:15.015613 systemd-logind[1109]: New session 7 of user core. Feb 12 20:24:15.016332 systemd[1]: Started session-7.scope. Feb 12 20:24:15.019000 audit[1248]: USER_START pid=1248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:15.020000 audit[1250]: CRED_ACQ pid=1250 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:15.067000 audit[1251]: USER_ACCT pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:15.067000 audit[1251]: CRED_REFR pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:15.068864 sudo[1251]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 12 20:24:15.069014 sudo[1251]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:24:15.069000 audit[1251]: USER_START pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:15.584954 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 12 20:24:15.590452 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 12 20:24:15.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:15.590832 systemd[1]: Reached target network-online.target. Feb 12 20:24:15.592216 systemd[1]: Starting docker.service... Feb 12 20:24:15.625359 env[1268]: time="2024-02-12T20:24:15.625300776Z" level=info msg="Starting up" Feb 12 20:24:15.626542 env[1268]: time="2024-02-12T20:24:15.626520484Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 20:24:15.626542 env[1268]: time="2024-02-12T20:24:15.626535121Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 20:24:15.626627 env[1268]: time="2024-02-12T20:24:15.626552383Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 20:24:15.626627 env[1268]: time="2024-02-12T20:24:15.626561741Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 20:24:15.628319 env[1268]: time="2024-02-12T20:24:15.628297397Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 20:24:15.628319 env[1268]: time="2024-02-12T20:24:15.628313327Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 20:24:15.628400 env[1268]: time="2024-02-12T20:24:15.628328575Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 20:24:15.628400 env[1268]: time="2024-02-12T20:24:15.628337011Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 20:24:15.709159 env[1268]: time="2024-02-12T20:24:15.709096843Z" level=info msg="Loading containers: start." Feb 12 20:24:15.744000 audit[1302]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.744000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffca17af8a0 a2=0 a3=7ffca17af88c items=0 ppid=1268 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.744000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 12 20:24:15.746000 audit[1304]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.746000 audit[1304]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd61c9d230 a2=0 a3=7ffd61c9d21c items=0 ppid=1268 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.746000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 12 20:24:15.747000 audit[1306]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.747000 audit[1306]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffef546e210 a2=0 a3=7ffef546e1fc items=0 ppid=1268 pid=1306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 20:24:15.749000 audit[1308]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.749000 audit[1308]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb0fee050 a2=0 a3=7fffb0fee03c items=0 ppid=1268 pid=1308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.749000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 20:24:15.750000 audit[1310]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.750000 audit[1310]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffcb69d180 a2=0 a3=7fffcb69d16c items=0 ppid=1268 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 12 20:24:15.769000 audit[1315]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:15.769000 audit[1315]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc751cf170 a2=0 a3=7ffc751cf15c items=0 ppid=1268 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:15.769000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 12 20:24:16.029000 audit[1317]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.029000 audit[1317]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff2f4f0c30 a2=0 a3=7fff2f4f0c1c items=0 ppid=1268 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.029000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 12 20:24:16.031000 audit[1319]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.031000 audit[1319]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc60d34480 a2=0 a3=7ffc60d3446c items=0 ppid=1268 pid=1319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 12 20:24:16.033000 audit[1321]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.033000 audit[1321]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffa6756450 a2=0 a3=7fffa675643c items=0 ppid=1268 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:24:16.188000 audit[1325]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.188000 audit[1325]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc97c792b0 a2=0 a3=7ffc97c7929c items=0 ppid=1268 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.188000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:24:16.189000 audit[1326]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.189000 audit[1326]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd7f3b6400 a2=0 a3=7ffd7f3b63ec items=0 ppid=1268 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:24:16.196296 kernel: Initializing XFRM netlink socket Feb 12 20:24:16.229199 env[1268]: time="2024-02-12T20:24:16.229146939Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 12 20:24:16.244000 audit[1334]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.244000 audit[1334]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffe23babc0 a2=0 a3=7fffe23babac items=0 ppid=1268 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 12 20:24:16.253000 audit[1337]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.253000 audit[1337]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdf902c920 a2=0 a3=7ffdf902c90c items=0 ppid=1268 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.253000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 12 20:24:16.256000 audit[1340]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.256000 audit[1340]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeea3521c0 a2=0 a3=7ffeea3521ac items=0 ppid=1268 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.256000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 12 20:24:16.258000 audit[1342]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.258000 audit[1342]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff3d8c7280 a2=0 a3=7fff3d8c726c items=0 ppid=1268 pid=1342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.258000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 12 20:24:16.259000 audit[1344]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.259000 audit[1344]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe36503c40 a2=0 a3=7ffe36503c2c items=0 ppid=1268 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.259000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 12 20:24:16.261000 audit[1346]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.261000 audit[1346]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd4d702500 a2=0 a3=7ffd4d7024ec items=0 ppid=1268 pid=1346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 12 20:24:16.263000 audit[1348]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.263000 audit[1348]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe82ccfe00 a2=0 a3=7ffe82ccfdec items=0 ppid=1268 pid=1348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 12 20:24:16.270000 audit[1351]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.270000 audit[1351]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffa6de0890 a2=0 a3=7fffa6de087c items=0 ppid=1268 pid=1351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.270000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 12 20:24:16.272000 audit[1353]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.272000 audit[1353]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffeb33a4010 a2=0 a3=7ffeb33a3ffc items=0 ppid=1268 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.272000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 20:24:16.274000 audit[1355]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.274000 audit[1355]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff9760b0e0 a2=0 a3=7fff9760b0cc items=0 ppid=1268 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.274000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 20:24:16.276000 audit[1357]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.276000 audit[1357]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd6f843e20 a2=0 a3=7ffd6f843e0c items=0 ppid=1268 pid=1357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 12 20:24:16.277813 systemd-networkd[1018]: docker0: Link UP Feb 12 20:24:16.286000 audit[1361]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.286000 audit[1361]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcef9f2b60 a2=0 a3=7ffcef9f2b4c items=0 ppid=1268 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:24:16.287000 audit[1362]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:16.287000 audit[1362]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffce34772a0 a2=0 a3=7ffce347728c items=0 ppid=1268 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.287000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:24:16.289069 env[1268]: time="2024-02-12T20:24:16.289035202Z" level=info msg="Loading containers: done." Feb 12 20:24:16.303312 env[1268]: time="2024-02-12T20:24:16.303238193Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 12 20:24:16.303476 env[1268]: time="2024-02-12T20:24:16.303459508Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 12 20:24:16.303600 env[1268]: time="2024-02-12T20:24:16.303577970Z" level=info msg="Daemon has completed initialization" Feb 12 20:24:16.319905 systemd[1]: Started docker.service. Feb 12 20:24:16.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:16.325791 env[1268]: time="2024-02-12T20:24:16.325729981Z" level=info msg="API listen on /run/docker.sock" Feb 12 20:24:16.342031 systemd[1]: Reloading. Feb 12 20:24:16.408271 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2024-02-12T20:24:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:24:16.408318 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2024-02-12T20:24:16Z" level=info msg="torcx already run" Feb 12 20:24:16.471656 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:24:16.471678 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:24:16.498197 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit: BPF prog-id=31 op=LOAD Feb 12 20:24:16.549000 audit: BPF prog-id=25 op=UNLOAD Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.550000 audit: BPF prog-id=32 op=LOAD Feb 12 20:24:16.550000 audit: BPF prog-id=29 op=UNLOAD Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit: BPF prog-id=33 op=LOAD Feb 12 20:24:16.551000 audit: BPF prog-id=21 op=UNLOAD Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit: BPF prog-id=34 op=LOAD Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.551000 audit: BPF prog-id=35 op=LOAD Feb 12 20:24:16.551000 audit: BPF prog-id=22 op=UNLOAD Feb 12 20:24:16.551000 audit: BPF prog-id=23 op=UNLOAD Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit: BPF prog-id=36 op=LOAD Feb 12 20:24:16.553000 audit: BPF prog-id=24 op=UNLOAD Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit: BPF prog-id=37 op=LOAD Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.553000 audit: BPF prog-id=38 op=LOAD Feb 12 20:24:16.553000 audit: BPF prog-id=18 op=UNLOAD Feb 12 20:24:16.553000 audit: BPF prog-id=19 op=UNLOAD Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.554000 audit: BPF prog-id=39 op=LOAD Feb 12 20:24:16.554000 audit: BPF prog-id=20 op=UNLOAD Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit: BPF prog-id=40 op=LOAD Feb 12 20:24:16.555000 audit: BPF prog-id=15 op=UNLOAD Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit: BPF prog-id=41 op=LOAD Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.555000 audit: BPF prog-id=42 op=LOAD Feb 12 20:24:16.555000 audit: BPF prog-id=16 op=UNLOAD Feb 12 20:24:16.555000 audit: BPF prog-id=17 op=UNLOAD Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit: BPF prog-id=43 op=LOAD Feb 12 20:24:16.557000 audit: BPF prog-id=26 op=UNLOAD Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit: BPF prog-id=44 op=LOAD Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.557000 audit: BPF prog-id=45 op=LOAD Feb 12 20:24:16.557000 audit: BPF prog-id=27 op=UNLOAD Feb 12 20:24:16.557000 audit: BPF prog-id=28 op=UNLOAD Feb 12 20:24:16.564396 systemd[1]: Started kubelet.service. Feb 12 20:24:16.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:16.606104 kubelet[1451]: E0212 20:24:16.606042 1451 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Feb 12 20:24:16.609119 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 20:24:16.609234 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 20:24:16.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:24:16.915955 env[1127]: time="2024-02-12T20:24:16.915854145Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.13\"" Feb 12 20:24:17.473003 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2003644721.mount: Deactivated successfully. Feb 12 20:24:19.444930 env[1127]: time="2024-02-12T20:24:19.444868453Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:19.446736 env[1127]: time="2024-02-12T20:24:19.446703405Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84900298406b2df97ade16b73c49c2b73265ded8735ac19a4e20c2a4ad65853f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:19.450361 env[1127]: time="2024-02-12T20:24:19.450321271Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:19.451182 env[1127]: time="2024-02-12T20:24:19.451125479Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.13\" returns image reference \"sha256:84900298406b2df97ade16b73c49c2b73265ded8735ac19a4e20c2a4ad65853f\"" Feb 12 20:24:19.452536 env[1127]: time="2024-02-12T20:24:19.452503995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:2f28bed4096abd572a56595ac0304238bdc271dcfe22c650707c09bf97ec16fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:19.460423 env[1127]: time="2024-02-12T20:24:19.460391931Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.13\"" Feb 12 20:24:21.510453 env[1127]: time="2024-02-12T20:24:21.510379902Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:21.512042 env[1127]: time="2024-02-12T20:24:21.512004149Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:921f237b560bdb02300f82d3606635d395b20635512fab10f0191cff42079486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:21.513738 env[1127]: time="2024-02-12T20:24:21.513700891Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:21.515059 env[1127]: time="2024-02-12T20:24:21.515035054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fda420c6c15cdd01c4eba3404f0662fe486a9c7f38fa13c741a21334673841a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:21.516468 env[1127]: time="2024-02-12T20:24:21.516432776Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.13\" returns image reference \"sha256:921f237b560bdb02300f82d3606635d395b20635512fab10f0191cff42079486\"" Feb 12 20:24:21.524689 env[1127]: time="2024-02-12T20:24:21.524661771Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.13\"" Feb 12 20:24:22.909607 env[1127]: time="2024-02-12T20:24:22.909551248Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:22.911502 env[1127]: time="2024-02-12T20:24:22.911447635Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4fe82b56f06250b6b7eb3d5a879cd2cfabf41cb3e45b24af6059eadbc3b8026e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:22.913016 env[1127]: time="2024-02-12T20:24:22.912991701Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:22.914523 env[1127]: time="2024-02-12T20:24:22.914490102Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:c3c7303ee6d01c8e5a769db28661cf854b55175aa72c67e9b6a7b9d47ac42af3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:22.915900 env[1127]: time="2024-02-12T20:24:22.915872895Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.13\" returns image reference \"sha256:4fe82b56f06250b6b7eb3d5a879cd2cfabf41cb3e45b24af6059eadbc3b8026e\"" Feb 12 20:24:22.924706 env[1127]: time="2024-02-12T20:24:22.924669335Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.13\"" Feb 12 20:24:23.929526 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1612994525.mount: Deactivated successfully. Feb 12 20:24:24.532186 env[1127]: time="2024-02-12T20:24:24.532124591Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:24.534069 env[1127]: time="2024-02-12T20:24:24.534024235Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5a7325fa2b6e8d712e4a770abb4a5a5852e87b6de8df34552d67853e9bfb9f9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:24.536148 env[1127]: time="2024-02-12T20:24:24.536126889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:24.537515 env[1127]: time="2024-02-12T20:24:24.537492961Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:f6e0de32a002b910b9b2e0e8d769e2d7b05208240559c745ce4781082ab15f22,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:24.537887 env[1127]: time="2024-02-12T20:24:24.537862354Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.13\" returns image reference \"sha256:5a7325fa2b6e8d712e4a770abb4a5a5852e87b6de8df34552d67853e9bfb9f9f\"" Feb 12 20:24:24.545911 env[1127]: time="2024-02-12T20:24:24.545879191Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 12 20:24:25.024150 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3371123795.mount: Deactivated successfully. Feb 12 20:24:25.029670 env[1127]: time="2024-02-12T20:24:25.029630210Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.031332 env[1127]: time="2024-02-12T20:24:25.031260468Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.032628 env[1127]: time="2024-02-12T20:24:25.032605811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.033876 env[1127]: time="2024-02-12T20:24:25.033846619Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.034263 env[1127]: time="2024-02-12T20:24:25.034227984Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Feb 12 20:24:25.043538 env[1127]: time="2024-02-12T20:24:25.043497431Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Feb 12 20:24:25.796876 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount140892716.mount: Deactivated successfully. Feb 12 20:24:26.859957 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 12 20:24:26.860141 systemd[1]: Stopped kubelet.service. Feb 12 20:24:26.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.861447 systemd[1]: Started kubelet.service. Feb 12 20:24:26.861851 kernel: kauditd_printk_skb: 259 callbacks suppressed Feb 12 20:24:26.861888 kernel: audit: type=1130 audit(1707769466.858:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.865845 kernel: audit: type=1131 audit(1707769466.858:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.865873 kernel: audit: type=1130 audit(1707769466.860:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.917398 kubelet[1508]: E0212 20:24:26.917321 1508 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Feb 12 20:24:26.920378 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 20:24:26.920487 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 20:24:26.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:24:26.923358 kernel: audit: type=1131 audit(1707769466.919:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:24:30.420118 env[1127]: time="2024-02-12T20:24:30.420061278Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:30.421696 env[1127]: time="2024-02-12T20:24:30.421675225Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:30.423332 env[1127]: time="2024-02-12T20:24:30.423303289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:30.424698 env[1127]: time="2024-02-12T20:24:30.424678478Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:30.425231 env[1127]: time="2024-02-12T20:24:30.425184457Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Feb 12 20:24:30.433875 env[1127]: time="2024-02-12T20:24:30.433841365Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Feb 12 20:24:30.992226 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3784660312.mount: Deactivated successfully. Feb 12 20:24:31.792464 env[1127]: time="2024-02-12T20:24:31.792379905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:31.795736 env[1127]: time="2024-02-12T20:24:31.795684764Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:31.798053 env[1127]: time="2024-02-12T20:24:31.797997973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:31.799565 env[1127]: time="2024-02-12T20:24:31.799516692Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:31.800066 env[1127]: time="2024-02-12T20:24:31.800036877Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Feb 12 20:24:33.654526 systemd[1]: Stopped kubelet.service. Feb 12 20:24:33.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:33.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:33.658974 kernel: audit: type=1130 audit(1707769473.653:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:33.659026 kernel: audit: type=1131 audit(1707769473.653:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:33.667586 systemd[1]: Reloading. Feb 12 20:24:33.732563 /usr/lib/systemd/system-generators/torcx-generator[1618]: time="2024-02-12T20:24:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:24:33.732592 /usr/lib/systemd/system-generators/torcx-generator[1618]: time="2024-02-12T20:24:33Z" level=info msg="torcx already run" Feb 12 20:24:33.784296 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:24:33.784309 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:24:33.802413 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.858214 kernel: audit: type=1400 audit(1707769473.852:382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.858261 kernel: audit: type=1400 audit(1707769473.852:383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.858288 kernel: audit: type=1400 audit(1707769473.852:384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.862086 kernel: audit: type=1400 audit(1707769473.852:385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.862118 kernel: audit: type=1400 audit(1707769473.852:386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864056 kernel: audit: type=1400 audit(1707769473.852:387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.865976 kernel: audit: type=1400 audit(1707769473.852:388): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869890 kernel: audit: type=1400 audit(1707769473.852:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.856000 audit: BPF prog-id=46 op=LOAD Feb 12 20:24:33.856000 audit: BPF prog-id=31 op=UNLOAD Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.858000 audit: BPF prog-id=47 op=LOAD Feb 12 20:24:33.858000 audit: BPF prog-id=32 op=UNLOAD Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit: BPF prog-id=48 op=LOAD Feb 12 20:24:33.860000 audit: BPF prog-id=33 op=UNLOAD Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit: BPF prog-id=49 op=LOAD Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.866000 audit: BPF prog-id=50 op=LOAD Feb 12 20:24:33.866000 audit: BPF prog-id=34 op=UNLOAD Feb 12 20:24:33.866000 audit: BPF prog-id=35 op=UNLOAD Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.868000 audit: BPF prog-id=51 op=LOAD Feb 12 20:24:33.868000 audit: BPF prog-id=36 op=UNLOAD Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit: BPF prog-id=52 op=LOAD Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit: BPF prog-id=53 op=LOAD Feb 12 20:24:33.869000 audit: BPF prog-id=37 op=UNLOAD Feb 12 20:24:33.869000 audit: BPF prog-id=38 op=UNLOAD Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.870000 audit: BPF prog-id=54 op=LOAD Feb 12 20:24:33.870000 audit: BPF prog-id=39 op=UNLOAD Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit: BPF prog-id=55 op=LOAD Feb 12 20:24:33.871000 audit: BPF prog-id=40 op=UNLOAD Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit: BPF prog-id=56 op=LOAD Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.871000 audit: BPF prog-id=57 op=LOAD Feb 12 20:24:33.871000 audit: BPF prog-id=41 op=UNLOAD Feb 12 20:24:33.871000 audit: BPF prog-id=42 op=UNLOAD Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit: BPF prog-id=58 op=LOAD Feb 12 20:24:33.873000 audit: BPF prog-id=43 op=UNLOAD Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit: BPF prog-id=59 op=LOAD Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:33.873000 audit: BPF prog-id=60 op=LOAD Feb 12 20:24:33.873000 audit: BPF prog-id=44 op=UNLOAD Feb 12 20:24:33.873000 audit: BPF prog-id=45 op=UNLOAD Feb 12 20:24:33.884678 systemd[1]: Started kubelet.service. Feb 12 20:24:33.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:33.927709 kubelet[1659]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Feb 12 20:24:33.927709 kubelet[1659]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:24:33.927709 kubelet[1659]: I0212 20:24:33.927692 1659 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 20:24:33.929195 kubelet[1659]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Feb 12 20:24:33.929195 kubelet[1659]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:24:34.073881 kubelet[1659]: I0212 20:24:34.073837 1659 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Feb 12 20:24:34.073881 kubelet[1659]: I0212 20:24:34.073870 1659 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 20:24:34.074102 kubelet[1659]: I0212 20:24:34.074082 1659 server.go:836] "Client rotation is on, will bootstrap in background" Feb 12 20:24:34.076866 kubelet[1659]: I0212 20:24:34.076847 1659 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 20:24:34.077521 kubelet[1659]: E0212 20:24:34.077484 1659 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.74:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.080540 kubelet[1659]: I0212 20:24:34.080522 1659 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 20:24:34.080719 kubelet[1659]: I0212 20:24:34.080707 1659 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 20:24:34.080776 kubelet[1659]: I0212 20:24:34.080770 1659 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 12 20:24:34.080859 kubelet[1659]: I0212 20:24:34.080786 1659 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 12 20:24:34.080859 kubelet[1659]: I0212 20:24:34.080795 1659 container_manager_linux.go:308] "Creating device plugin manager" Feb 12 20:24:34.080911 kubelet[1659]: I0212 20:24:34.080871 1659 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:24:34.084328 kubelet[1659]: I0212 20:24:34.084238 1659 kubelet.go:398] "Attempting to sync node with API server" Feb 12 20:24:34.084328 kubelet[1659]: I0212 20:24:34.084321 1659 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 20:24:34.084430 kubelet[1659]: I0212 20:24:34.084356 1659 kubelet.go:297] "Adding apiserver pod source" Feb 12 20:24:34.084430 kubelet[1659]: I0212 20:24:34.084373 1659 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 20:24:34.085043 kubelet[1659]: W0212 20:24:34.084977 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.74:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.085112 kubelet[1659]: E0212 20:24:34.085052 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.74:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.085185 kubelet[1659]: W0212 20:24:34.085145 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.74:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.085336 kubelet[1659]: E0212 20:24:34.085190 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.74:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.085336 kubelet[1659]: I0212 20:24:34.085221 1659 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 20:24:34.085614 kubelet[1659]: W0212 20:24:34.085597 1659 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 12 20:24:34.086191 kubelet[1659]: I0212 20:24:34.086163 1659 server.go:1186] "Started kubelet" Feb 12 20:24:34.086573 kubelet[1659]: I0212 20:24:34.086330 1659 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 20:24:34.087141 kubelet[1659]: I0212 20:24:34.087091 1659 server.go:451] "Adding debug handlers to kubelet server" Feb 12 20:24:34.087342 kubelet[1659]: E0212 20:24:34.086979 1659 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.17b33749dd28d1eb", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2024, time.February, 12, 20, 24, 34, 86130155, time.Local), LastTimestamp:time.Date(2024, time.February, 12, 20, 24, 34, 86130155, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.74:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.74:6443: connect: connection refused'(may retry after sleeping) Feb 12 20:24:34.088100 kubelet[1659]: E0212 20:24:34.088061 1659 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 20:24:34.088190 kubelet[1659]: E0212 20:24:34.088111 1659 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 20:24:34.087000 audit[1659]: AVC avc: denied { mac_admin } for pid=1659 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:34.087000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:34.087000 audit[1659]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a43080 a1=c0001aac18 a2=c000a43050 a3=25 items=0 ppid=1 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.087000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:34.088000 audit[1659]: AVC avc: denied { mac_admin } for pid=1659 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:34.088000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:34.088000 audit[1659]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000143be0 a1=c0001aac30 a2=c000a43110 a3=25 items=0 ppid=1 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.088000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:34.089784 kubelet[1659]: I0212 20:24:34.089367 1659 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 20:24:34.089784 kubelet[1659]: I0212 20:24:34.089411 1659 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 20:24:34.089784 kubelet[1659]: I0212 20:24:34.089477 1659 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 20:24:34.089879 kubelet[1659]: I0212 20:24:34.089857 1659 volume_manager.go:293] "Starting Kubelet Volume Manager" Feb 12 20:24:34.091097 kubelet[1659]: I0212 20:24:34.091080 1659 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 12 20:24:34.091403 kubelet[1659]: W0212 20:24:34.091368 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.74:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.091403 kubelet[1659]: E0212 20:24:34.091402 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.74:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.091584 kubelet[1659]: E0212 20:24:34.091563 1659 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.74:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.090000 audit[1671]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.090000 audit[1671]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd607a68f0 a2=0 a3=7ffd607a68dc items=0 ppid=1659 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 20:24:34.092000 audit[1672]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.092000 audit[1672]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeeb7fe300 a2=0 a3=7ffeeb7fe2ec items=0 ppid=1659 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 20:24:34.094000 audit[1674]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.094000 audit[1674]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc348a7e90 a2=0 a3=7ffc348a7e7c items=0 ppid=1659 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:24:34.096000 audit[1676]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.096000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff087c47f0 a2=0 a3=7fff087c47dc items=0 ppid=1659 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:24:34.101000 audit[1679]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.101000 audit[1679]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe44f172b0 a2=0 a3=7ffe44f1729c items=0 ppid=1659 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 12 20:24:34.102000 audit[1680]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.102000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc892796e0 a2=0 a3=7ffc892796cc items=0 ppid=1659 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Feb 12 20:24:34.108246 kubelet[1659]: I0212 20:24:34.108229 1659 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 20:24:34.108246 kubelet[1659]: I0212 20:24:34.108245 1659 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 20:24:34.108455 kubelet[1659]: I0212 20:24:34.108260 1659 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:24:34.107000 audit[1689]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.107000 audit[1689]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffea3d894c0 a2=0 a3=7ffea3d894ac items=0 ppid=1659 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Feb 12 20:24:34.116000 audit[1692]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.116000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffea7b8aee0 a2=0 a3=7ffea7b8aecc items=0 ppid=1659 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.116000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Feb 12 20:24:34.117897 kubelet[1659]: I0212 20:24:34.117877 1659 policy_none.go:49] "None policy: Start" Feb 12 20:24:34.118359 kubelet[1659]: I0212 20:24:34.118336 1659 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 20:24:34.118403 kubelet[1659]: I0212 20:24:34.118371 1659 state_mem.go:35] "Initializing new in-memory state store" Feb 12 20:24:34.117000 audit[1693]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.117000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc8cf24270 a2=0 a3=7ffc8cf2425c items=0 ppid=1659 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Feb 12 20:24:34.118000 audit[1694]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.118000 audit[1694]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcc043750 a2=0 a3=7ffdcc04373c items=0 ppid=1659 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 20:24:34.120000 audit[1696]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.120000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffa62771f0 a2=0 a3=7fffa62771dc items=0 ppid=1659 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Feb 12 20:24:34.122000 audit[1698]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.122000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffec403f930 a2=0 a3=7ffec403f91c items=0 ppid=1659 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.122000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 20:24:34.125221 systemd[1]: Created slice kubepods.slice. Feb 12 20:24:34.124000 audit[1700]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.124000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc72a80a60 a2=0 a3=7ffc72a80a4c items=0 ppid=1659 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Feb 12 20:24:34.126000 audit[1702]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.126000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffce22dc1e0 a2=0 a3=7ffce22dc1cc items=0 ppid=1659 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Feb 12 20:24:34.128178 systemd[1]: Created slice kubepods-besteffort.slice. Feb 12 20:24:34.129000 audit[1704]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.129000 audit[1704]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffe7b9e3ad0 a2=0 a3=7ffe7b9e3abc items=0 ppid=1659 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.129000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Feb 12 20:24:34.130663 kubelet[1659]: I0212 20:24:34.130622 1659 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 12 20:24:34.129000 audit[1705]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1705 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.129000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffe28a4f40 a2=0 a3=7fffe28a4f2c items=0 ppid=1659 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.129000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 20:24:34.130000 audit[1706]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.130000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6a917de0 a2=0 a3=7ffd6a917dcc items=0 ppid=1659 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 20:24:34.130000 audit[1707]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.130000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe38a004d0 a2=0 a3=7ffe38a004bc items=0 ppid=1659 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Feb 12 20:24:34.131000 audit[1708]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.131000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2a78cea0 a2=0 a3=7ffd2a78ce8c items=0 ppid=1659 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 20:24:34.134109 systemd[1]: Created slice kubepods-burstable.slice. Feb 12 20:24:34.133000 audit[1710]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:34.133000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd7777d10 a2=0 a3=7fffd7777cfc items=0 ppid=1659 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.133000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 20:24:34.135515 kubelet[1659]: I0212 20:24:34.135490 1659 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 20:24:34.134000 audit[1659]: AVC avc: denied { mac_admin } for pid=1659 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:34.134000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:34.134000 audit[1711]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1711 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.134000 audit[1659]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e9c840 a1=c000ea8528 a2=c000e9c810 a3=25 items=0 ppid=1 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.134000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:34.134000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd4411fcf0 a2=0 a3=7ffd4411fcdc items=0 ppid=1659 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.134000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Feb 12 20:24:34.135000 audit[1712]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.135000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffc862d7bb0 a2=0 a3=7ffc862d7b9c items=0 ppid=1659 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.135000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 20:24:34.137221 kubelet[1659]: I0212 20:24:34.135550 1659 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 20:24:34.137221 kubelet[1659]: I0212 20:24:34.135679 1659 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 20:24:34.137221 kubelet[1659]: E0212 20:24:34.136443 1659 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Feb 12 20:24:34.137000 audit[1714]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.137000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd7559e380 a2=0 a3=7ffd7559e36c items=0 ppid=1659 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.137000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Feb 12 20:24:34.138000 audit[1715]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.138000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffed9570670 a2=0 a3=7ffed957065c items=0 ppid=1659 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.138000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Feb 12 20:24:34.138000 audit[1716]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.138000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbb667e40 a2=0 a3=7ffcbb667e2c items=0 ppid=1659 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.138000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 20:24:34.140000 audit[1718]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.140000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffea1c28f20 a2=0 a3=7ffea1c28f0c items=0 ppid=1659 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Feb 12 20:24:34.141000 audit[1720]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.141000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff936c18d0 a2=0 a3=7fff936c18bc items=0 ppid=1659 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.141000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 20:24:34.143000 audit[1722]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.143000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffd7670cf40 a2=0 a3=7ffd7670cf2c items=0 ppid=1659 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Feb 12 20:24:34.145000 audit[1724]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.145000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffcdfa7d110 a2=0 a3=7ffcdfa7d0fc items=0 ppid=1659 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Feb 12 20:24:34.146000 audit[1726]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.146000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fff757f7c30 a2=0 a3=7fff757f7c1c items=0 ppid=1659 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Feb 12 20:24:34.148530 kubelet[1659]: I0212 20:24:34.148502 1659 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 12 20:24:34.148530 kubelet[1659]: I0212 20:24:34.148517 1659 status_manager.go:176] "Starting to sync pod status with apiserver" Feb 12 20:24:34.148530 kubelet[1659]: I0212 20:24:34.148532 1659 kubelet.go:2113] "Starting kubelet main sync loop" Feb 12 20:24:34.148770 kubelet[1659]: E0212 20:24:34.148581 1659 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Feb 12 20:24:34.149082 kubelet[1659]: W0212 20:24:34.149026 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.74:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.149082 kubelet[1659]: E0212 20:24:34.149085 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.74:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.147000 audit[1727]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.147000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa5ef0810 a2=0 a3=7fffa5ef07fc items=0 ppid=1659 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 20:24:34.148000 audit[1728]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.148000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc6705bc00 a2=0 a3=7ffc6705bbec items=0 ppid=1659 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.148000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 20:24:34.149000 audit[1729]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:34.149000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe7178ae80 a2=0 a3=7ffe7178ae6c items=0 ppid=1659 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:34.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 20:24:34.193051 kubelet[1659]: I0212 20:24:34.192941 1659 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:34.196106 kubelet[1659]: E0212 20:24:34.196068 1659 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.74:6443/api/v1/nodes\": dial tcp 10.0.0.74:6443: connect: connection refused" node="localhost" Feb 12 20:24:34.249299 kubelet[1659]: I0212 20:24:34.249229 1659 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:34.250403 kubelet[1659]: I0212 20:24:34.250378 1659 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:34.251227 kubelet[1659]: I0212 20:24:34.251190 1659 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:34.252304 kubelet[1659]: I0212 20:24:34.252264 1659 status_manager.go:698] "Failed to get status for pod" podUID=550020dd9f101bcc23e1d3c651841c4d pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.74:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.74:6443: connect: connection refused" Feb 12 20:24:34.252535 kubelet[1659]: I0212 20:24:34.252514 1659 status_manager.go:698] "Failed to get status for pod" podUID=72ae17a74a2eae76daac6d298477aff0 pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.74:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.74:6443: connect: connection refused" Feb 12 20:24:34.252962 kubelet[1659]: I0212 20:24:34.252941 1659 status_manager.go:698] "Failed to get status for pod" podUID=d20dd2a198325709e09b04974ab0157b pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.74:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.74:6443: connect: connection refused" Feb 12 20:24:34.256135 systemd[1]: Created slice kubepods-burstable-pod550020dd9f101bcc23e1d3c651841c4d.slice. Feb 12 20:24:34.274228 systemd[1]: Created slice kubepods-burstable-pod72ae17a74a2eae76daac6d298477aff0.slice. Feb 12 20:24:34.280787 systemd[1]: Created slice kubepods-burstable-podd20dd2a198325709e09b04974ab0157b.slice. Feb 12 20:24:34.291926 kubelet[1659]: E0212 20:24:34.291891 1659 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.74:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.293010 kubelet[1659]: I0212 20:24:34.292985 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:34.293080 kubelet[1659]: I0212 20:24:34.293021 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:34.293080 kubelet[1659]: I0212 20:24:34.293042 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:34.293153 kubelet[1659]: I0212 20:24:34.293128 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:34.293197 kubelet[1659]: I0212 20:24:34.293164 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:34.293259 kubelet[1659]: I0212 20:24:34.293230 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/72ae17a74a2eae76daac6d298477aff0-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"72ae17a74a2eae76daac6d298477aff0\") " pod="kube-system/kube-scheduler-localhost" Feb 12 20:24:34.293316 kubelet[1659]: I0212 20:24:34.293304 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:34.293384 kubelet[1659]: I0212 20:24:34.293361 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:34.293447 kubelet[1659]: I0212 20:24:34.293420 1659 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:34.397496 kubelet[1659]: I0212 20:24:34.397461 1659 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:34.397846 kubelet[1659]: E0212 20:24:34.397816 1659 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.74:6443/api/v1/nodes\": dial tcp 10.0.0.74:6443: connect: connection refused" node="localhost" Feb 12 20:24:34.572709 kubelet[1659]: E0212 20:24:34.572569 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:34.573464 env[1127]: time="2024-02-12T20:24:34.573421815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:550020dd9f101bcc23e1d3c651841c4d,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:34.579773 kubelet[1659]: E0212 20:24:34.579748 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:34.580331 env[1127]: time="2024-02-12T20:24:34.580301139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:72ae17a74a2eae76daac6d298477aff0,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:34.582891 kubelet[1659]: E0212 20:24:34.582848 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:34.587904 env[1127]: time="2024-02-12T20:24:34.587583989Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d20dd2a198325709e09b04974ab0157b,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:34.692816 kubelet[1659]: E0212 20:24:34.692756 1659 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.74:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.799349 kubelet[1659]: I0212 20:24:34.799322 1659 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:34.799619 kubelet[1659]: E0212 20:24:34.799593 1659 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.74:6443/api/v1/nodes\": dial tcp 10.0.0.74:6443: connect: connection refused" node="localhost" Feb 12 20:24:34.887270 kubelet[1659]: W0212 20:24:34.887092 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.74:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.887270 kubelet[1659]: E0212 20:24:34.887155 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.74:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.962810 kubelet[1659]: W0212 20:24:34.962724 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.74:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:34.962810 kubelet[1659]: E0212 20:24:34.962794 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.74:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.220930 kubelet[1659]: W0212 20:24:35.220818 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.74:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.220930 kubelet[1659]: E0212 20:24:35.220866 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.74:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.285449 kubelet[1659]: W0212 20:24:35.285386 1659 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.74:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.285449 kubelet[1659]: E0212 20:24:35.285438 1659 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.74:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.472045 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2407503563.mount: Deactivated successfully. Feb 12 20:24:35.477393 env[1127]: time="2024-02-12T20:24:35.477338975Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.480195 env[1127]: time="2024-02-12T20:24:35.480153104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.480883 env[1127]: time="2024-02-12T20:24:35.480857144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.481626 env[1127]: time="2024-02-12T20:24:35.481595880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.483896 env[1127]: time="2024-02-12T20:24:35.483859285Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.484949 env[1127]: time="2024-02-12T20:24:35.484933180Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.486130 env[1127]: time="2024-02-12T20:24:35.486104016Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.487366 env[1127]: time="2024-02-12T20:24:35.487347298Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.489216 env[1127]: time="2024-02-12T20:24:35.489189393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.490340 env[1127]: time="2024-02-12T20:24:35.490319964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.491736 env[1127]: time="2024-02-12T20:24:35.491717936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.493080 env[1127]: time="2024-02-12T20:24:35.493050135Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:35.494139 kubelet[1659]: E0212 20:24:35.494088 1659 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.74:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.74:6443: connect: connection refused Feb 12 20:24:35.504711 env[1127]: time="2024-02-12T20:24:35.504649131Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:35.504711 env[1127]: time="2024-02-12T20:24:35.504687333Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:35.504711 env[1127]: time="2024-02-12T20:24:35.504699666Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:35.504936 env[1127]: time="2024-02-12T20:24:35.504903378Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c84bd79796c127708b8355a769cc11479fdd0ea250a52a3a1691ea8e52782fdf pid=1737 runtime=io.containerd.runc.v2 Feb 12 20:24:35.513842 env[1127]: time="2024-02-12T20:24:35.513734603Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:35.513842 env[1127]: time="2024-02-12T20:24:35.513798603Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:35.513842 env[1127]: time="2024-02-12T20:24:35.513816386Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:35.514025 env[1127]: time="2024-02-12T20:24:35.513937163Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec3a8f46aa2fcffc20ca18d0b28f781f44257360a39f37e09993237aab6de279 pid=1755 runtime=io.containerd.runc.v2 Feb 12 20:24:35.520347 env[1127]: time="2024-02-12T20:24:35.520250645Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:35.520550 env[1127]: time="2024-02-12T20:24:35.520521062Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:35.520723 env[1127]: time="2024-02-12T20:24:35.520672126Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:35.521609 env[1127]: time="2024-02-12T20:24:35.521398709Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5ea62df37985485d1a5f65d5efbc59ef4770b44f7836e0e61127ef5c24527f22 pid=1783 runtime=io.containerd.runc.v2 Feb 12 20:24:35.522365 systemd[1]: Started cri-containerd-c84bd79796c127708b8355a769cc11479fdd0ea250a52a3a1691ea8e52782fdf.scope. Feb 12 20:24:35.527874 systemd[1]: Started cri-containerd-ec3a8f46aa2fcffc20ca18d0b28f781f44257360a39f37e09993237aab6de279.scope. Feb 12 20:24:35.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit: BPF prog-id=61 op=LOAD Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1737 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346264373937393663313237373038623833353561373639636331 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1737 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346264373937393663313237373038623833353561373639636331 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit: BPF prog-id=62 op=LOAD Feb 12 20:24:35.536000 audit[1747]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000095d80 items=0 ppid=1737 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346264373937393663313237373038623833353561373639636331 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit: BPF prog-id=63 op=LOAD Feb 12 20:24:35.536000 audit[1747]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000095dc8 items=0 ppid=1737 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346264373937393663313237373038623833353561373639636331 Feb 12 20:24:35.536000 audit: BPF prog-id=63 op=UNLOAD Feb 12 20:24:35.536000 audit: BPF prog-id=62 op=UNLOAD Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { perfmon } for pid=1747 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit[1747]: AVC avc: denied { bpf } for pid=1747 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.536000 audit: BPF prog-id=64 op=LOAD Feb 12 20:24:35.536000 audit[1747]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0004141d8 items=0 ppid=1737 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346264373937393663313237373038623833353561373639636331 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.538000 audit: BPF prog-id=65 op=LOAD Feb 12 20:24:35.540000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.540000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1755 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563336138663436616132666366666332306361313864306232386637 Feb 12 20:24:35.540000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.540000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1755 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563336138663436616132666366666332306361313864306232386637 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.541000 audit: BPF prog-id=66 op=LOAD Feb 12 20:24:35.541000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000318c70 items=0 ppid=1755 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563336138663436616132666366666332306361313864306232386637 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.542000 audit: BPF prog-id=67 op=LOAD Feb 12 20:24:35.542000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000318cb8 items=0 ppid=1755 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563336138663436616132666366666332306361313864306232386637 Feb 12 20:24:35.543000 audit: BPF prog-id=67 op=UNLOAD Feb 12 20:24:35.543000 audit: BPF prog-id=66 op=UNLOAD Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.543000 audit: BPF prog-id=68 op=LOAD Feb 12 20:24:35.543000 audit[1769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003190c8 items=0 ppid=1755 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563336138663436616132666366666332306361313864306232386637 Feb 12 20:24:35.562546 systemd[1]: Started cri-containerd-5ea62df37985485d1a5f65d5efbc59ef4770b44f7836e0e61127ef5c24527f22.scope. Feb 12 20:24:35.566442 env[1127]: time="2024-02-12T20:24:35.566406140Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:72ae17a74a2eae76daac6d298477aff0,Namespace:kube-system,Attempt:0,} returns sandbox id \"c84bd79796c127708b8355a769cc11479fdd0ea250a52a3a1691ea8e52782fdf\"" Feb 12 20:24:35.569122 kubelet[1659]: E0212 20:24:35.568938 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:35.575158 env[1127]: time="2024-02-12T20:24:35.575096240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d20dd2a198325709e09b04974ab0157b,Namespace:kube-system,Attempt:0,} returns sandbox id \"ec3a8f46aa2fcffc20ca18d0b28f781f44257360a39f37e09993237aab6de279\"" Feb 12 20:24:35.575987 env[1127]: time="2024-02-12T20:24:35.575962825Z" level=info msg="CreateContainer within sandbox \"c84bd79796c127708b8355a769cc11479fdd0ea250a52a3a1691ea8e52782fdf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 12 20:24:35.576757 kubelet[1659]: E0212 20:24:35.576569 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:35.578713 env[1127]: time="2024-02-12T20:24:35.578685763Z" level=info msg="CreateContainer within sandbox \"ec3a8f46aa2fcffc20ca18d0b28f781f44257360a39f37e09993237aab6de279\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.580000 audit: BPF prog-id=69 op=LOAD Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1783 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565613632646633373938353438356431613566363564356566626335 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1783 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565613632646633373938353438356431613566363564356566626335 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit: BPF prog-id=70 op=LOAD Feb 12 20:24:35.581000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003a23c0 items=0 ppid=1783 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565613632646633373938353438356431613566363564356566626335 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.581000 audit: BPF prog-id=71 op=LOAD Feb 12 20:24:35.581000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003a2408 items=0 ppid=1783 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565613632646633373938353438356431613566363564356566626335 Feb 12 20:24:35.582000 audit: BPF prog-id=71 op=UNLOAD Feb 12 20:24:35.582000 audit: BPF prog-id=70 op=UNLOAD Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.582000 audit: BPF prog-id=72 op=LOAD Feb 12 20:24:35.582000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a2818 items=0 ppid=1783 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565613632646633373938353438356431613566363564356566626335 Feb 12 20:24:35.599484 env[1127]: time="2024-02-12T20:24:35.599436175Z" level=info msg="CreateContainer within sandbox \"ec3a8f46aa2fcffc20ca18d0b28f781f44257360a39f37e09993237aab6de279\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0706d402f4729a5c2a650acd216f995b818e06a6bc83e403fe4e1d6349288868\"" Feb 12 20:24:35.600319 env[1127]: time="2024-02-12T20:24:35.600294464Z" level=info msg="StartContainer for \"0706d402f4729a5c2a650acd216f995b818e06a6bc83e403fe4e1d6349288868\"" Feb 12 20:24:35.600922 kubelet[1659]: I0212 20:24:35.600906 1659 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:35.601246 kubelet[1659]: E0212 20:24:35.601223 1659 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.74:6443/api/v1/nodes\": dial tcp 10.0.0.74:6443: connect: connection refused" node="localhost" Feb 12 20:24:35.604814 env[1127]: time="2024-02-12T20:24:35.604777443Z" level=info msg="CreateContainer within sandbox \"c84bd79796c127708b8355a769cc11479fdd0ea250a52a3a1691ea8e52782fdf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"7389c8b83b92bb430eccf48d27400ad0589c9da831c38bfaac7629f47499ed9d\"" Feb 12 20:24:35.605061 env[1127]: time="2024-02-12T20:24:35.605026230Z" level=info msg="StartContainer for \"7389c8b83b92bb430eccf48d27400ad0589c9da831c38bfaac7629f47499ed9d\"" Feb 12 20:24:35.610827 env[1127]: time="2024-02-12T20:24:35.610775273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:550020dd9f101bcc23e1d3c651841c4d,Namespace:kube-system,Attempt:0,} returns sandbox id \"5ea62df37985485d1a5f65d5efbc59ef4770b44f7836e0e61127ef5c24527f22\"" Feb 12 20:24:35.611522 kubelet[1659]: E0212 20:24:35.611496 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:35.613912 env[1127]: time="2024-02-12T20:24:35.613873725Z" level=info msg="CreateContainer within sandbox \"5ea62df37985485d1a5f65d5efbc59ef4770b44f7836e0e61127ef5c24527f22\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 12 20:24:35.617600 systemd[1]: Started cri-containerd-0706d402f4729a5c2a650acd216f995b818e06a6bc83e403fe4e1d6349288868.scope. Feb 12 20:24:35.626322 systemd[1]: Started cri-containerd-7389c8b83b92bb430eccf48d27400ad0589c9da831c38bfaac7629f47499ed9d.scope. Feb 12 20:24:35.629742 env[1127]: time="2024-02-12T20:24:35.629708357Z" level=info msg="CreateContainer within sandbox \"5ea62df37985485d1a5f65d5efbc59ef4770b44f7836e0e61127ef5c24527f22\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0479edf95e5f6e0ad91e6c5470c089e38139c7232fc7c35f8fe8a616933107a2\"" Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.630000 audit: BPF prog-id=73 op=LOAD Feb 12 20:24:35.632524 env[1127]: time="2024-02-12T20:24:35.631456385Z" level=info msg="StartContainer for \"0479edf95e5f6e0ad91e6c5470c089e38139c7232fc7c35f8fe8a616933107a2\"" Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1755 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303664343032663437323961356332613635306163643231366639 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1755 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303664343032663437323961356332613635306163643231366639 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit: BPF prog-id=74 op=LOAD Feb 12 20:24:35.631000 audit[1858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028b020 items=0 ppid=1755 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303664343032663437323961356332613635306163643231366639 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit: BPF prog-id=75 op=LOAD Feb 12 20:24:35.631000 audit[1858]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028b068 items=0 ppid=1755 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303664343032663437323961356332613635306163643231366639 Feb 12 20:24:35.631000 audit: BPF prog-id=75 op=UNLOAD Feb 12 20:24:35.631000 audit: BPF prog-id=74 op=UNLOAD Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { perfmon } for pid=1858 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit[1858]: AVC avc: denied { bpf } for pid=1858 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.631000 audit: BPF prog-id=76 op=LOAD Feb 12 20:24:35.631000 audit[1858]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b478 items=0 ppid=1755 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303664343032663437323961356332613635306163643231366639 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.639000 audit: BPF prog-id=77 op=LOAD Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1737 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733383963386238336239326262343330656363663438643237343030 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1737 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733383963386238336239326262343330656363663438643237343030 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.640000 audit: BPF prog-id=78 op=LOAD Feb 12 20:24:35.640000 audit[1876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003dcd20 items=0 ppid=1737 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733383963386238336239326262343330656363663438643237343030 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.641000 audit: BPF prog-id=79 op=LOAD Feb 12 20:24:35.641000 audit[1876]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003dcd68 items=0 ppid=1737 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733383963386238336239326262343330656363663438643237343030 Feb 12 20:24:35.641000 audit: BPF prog-id=79 op=UNLOAD Feb 12 20:24:35.641000 audit: BPF prog-id=78 op=UNLOAD Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { perfmon } for pid=1876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit[1876]: AVC avc: denied { bpf } for pid=1876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.642000 audit: BPF prog-id=80 op=LOAD Feb 12 20:24:35.642000 audit[1876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dd178 items=0 ppid=1737 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733383963386238336239326262343330656363663438643237343030 Feb 12 20:24:35.653787 systemd[1]: Started cri-containerd-0479edf95e5f6e0ad91e6c5470c089e38139c7232fc7c35f8fe8a616933107a2.scope. Feb 12 20:24:35.656355 env[1127]: time="2024-02-12T20:24:35.656318459Z" level=info msg="StartContainer for \"0706d402f4729a5c2a650acd216f995b818e06a6bc83e403fe4e1d6349288868\" returns successfully" Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit: BPF prog-id=81 op=LOAD Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1783 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373965646639356535663665306164393165366335343730633038 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1783 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373965646639356535663665306164393165366335343730633038 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit: BPF prog-id=82 op=LOAD Feb 12 20:24:35.670000 audit[1912]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000dfd10 items=0 ppid=1783 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373965646639356535663665306164393165366335343730633038 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.670000 audit: BPF prog-id=83 op=LOAD Feb 12 20:24:35.670000 audit[1912]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000dfd58 items=0 ppid=1783 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373965646639356535663665306164393165366335343730633038 Feb 12 20:24:35.671000 audit: BPF prog-id=83 op=UNLOAD Feb 12 20:24:35.671000 audit: BPF prog-id=82 op=UNLOAD Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { perfmon } for pid=1912 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit[1912]: AVC avc: denied { bpf } for pid=1912 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:35.671000 audit: BPF prog-id=84 op=LOAD Feb 12 20:24:35.671000 audit[1912]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000348168 items=0 ppid=1783 pid=1912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:35.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373965646639356535663665306164393165366335343730633038 Feb 12 20:24:35.675459 env[1127]: time="2024-02-12T20:24:35.675410070Z" level=info msg="StartContainer for \"7389c8b83b92bb430eccf48d27400ad0589c9da831c38bfaac7629f47499ed9d\" returns successfully" Feb 12 20:24:35.708631 env[1127]: time="2024-02-12T20:24:35.708570990Z" level=info msg="StartContainer for \"0479edf95e5f6e0ad91e6c5470c089e38139c7232fc7c35f8fe8a616933107a2\" returns successfully" Feb 12 20:24:36.154848 kubelet[1659]: E0212 20:24:36.154384 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:36.156999 kubelet[1659]: E0212 20:24:36.156986 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:36.158830 kubelet[1659]: E0212 20:24:36.158818 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:36.464000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:36.464000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00096f7d0 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:36.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:36.464000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:36.464000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000127500 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:36.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:37.001000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.001000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0005c4000 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.002000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.002000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0019625c0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.002000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.002000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0011aa0c0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.003000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.003000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c001244180 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0041949a0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0012448a0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:24:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:24:37.097602 kubelet[1659]: E0212 20:24:37.097575 1659 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Feb 12 20:24:37.160518 kubelet[1659]: E0212 20:24:37.160490 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:37.160850 kubelet[1659]: E0212 20:24:37.160664 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:37.160918 kubelet[1659]: E0212 20:24:37.160897 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:37.202930 kubelet[1659]: I0212 20:24:37.202904 1659 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:37.688981 kubelet[1659]: I0212 20:24:37.688939 1659 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 12 20:24:38.086695 kubelet[1659]: I0212 20:24:38.086595 1659 apiserver.go:52] "Watching apiserver" Feb 12 20:24:38.692232 kubelet[1659]: I0212 20:24:38.692200 1659 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 12 20:24:38.719670 kubelet[1659]: I0212 20:24:38.719644 1659 reconciler.go:41] "Reconciler: start to sync state" Feb 12 20:24:38.891246 kubelet[1659]: E0212 20:24:38.891199 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:39.162329 kubelet[1659]: E0212 20:24:39.162189 1659 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:39.458906 systemd[1]: Reloading. Feb 12 20:24:39.527765 /usr/lib/systemd/system-generators/torcx-generator[1996]: time="2024-02-12T20:24:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:24:39.527799 /usr/lib/systemd/system-generators/torcx-generator[1996]: time="2024-02-12T20:24:39Z" level=info msg="torcx already run" Feb 12 20:24:39.586491 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:24:39.586505 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:24:39.604764 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:24:39.675351 kernel: kauditd_printk_skb: 642 callbacks suppressed Feb 12 20:24:39.675487 kernel: audit: type=1400 audit(1707769479.668:707): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.675516 kernel: audit: type=1400 audit(1707769479.668:708): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.675531 kernel: audit: type=1400 audit(1707769479.668:709): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.679824 kernel: audit: type=1400 audit(1707769479.668:710): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.679911 kernel: audit: type=1400 audit(1707769479.668:711): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.679926 kernel: audit: type=1400 audit(1707769479.668:712): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.683869 kernel: audit: type=1400 audit(1707769479.668:713): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.683903 kernel: audit: type=1400 audit(1707769479.668:714): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.685971 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 12 20:24:39.686003 kernel: audit: type=1400 audit(1707769479.668:715): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.670000 audit: BPF prog-id=85 op=LOAD Feb 12 20:24:39.671000 audit: BPF prog-id=46 op=UNLOAD Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit: BPF prog-id=86 op=LOAD Feb 12 20:24:39.673000 audit: BPF prog-id=65 op=UNLOAD Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.675000 audit: BPF prog-id=87 op=LOAD Feb 12 20:24:39.675000 audit: BPF prog-id=47 op=UNLOAD Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit: BPF prog-id=88 op=LOAD Feb 12 20:24:39.677000 audit: BPF prog-id=48 op=UNLOAD Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit: BPF prog-id=89 op=LOAD Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.683000 audit: BPF prog-id=90 op=LOAD Feb 12 20:24:39.683000 audit: BPF prog-id=49 op=UNLOAD Feb 12 20:24:39.683000 audit: BPF prog-id=50 op=UNLOAD Feb 12 20:24:39.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit: BPF prog-id=91 op=LOAD Feb 12 20:24:39.688000 audit: BPF prog-id=73 op=UNLOAD Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.688000 audit: BPF prog-id=92 op=LOAD Feb 12 20:24:39.688000 audit: BPF prog-id=61 op=UNLOAD Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.689000 audit: BPF prog-id=93 op=LOAD Feb 12 20:24:39.689000 audit: BPF prog-id=81 op=UNLOAD Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.690000 audit: BPF prog-id=94 op=LOAD Feb 12 20:24:39.690000 audit: BPF prog-id=77 op=UNLOAD Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit: BPF prog-id=95 op=LOAD Feb 12 20:24:39.691000 audit: BPF prog-id=51 op=UNLOAD Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit: BPF prog-id=96 op=LOAD Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.691000 audit: BPF prog-id=97 op=LOAD Feb 12 20:24:39.691000 audit: BPF prog-id=52 op=UNLOAD Feb 12 20:24:39.691000 audit: BPF prog-id=53 op=UNLOAD Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.692000 audit: BPF prog-id=98 op=LOAD Feb 12 20:24:39.692000 audit: BPF prog-id=54 op=UNLOAD Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit: BPF prog-id=99 op=LOAD Feb 12 20:24:39.693000 audit: BPF prog-id=55 op=UNLOAD Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit: BPF prog-id=100 op=LOAD Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit: BPF prog-id=101 op=LOAD Feb 12 20:24:39.693000 audit: BPF prog-id=56 op=UNLOAD Feb 12 20:24:39.693000 audit: BPF prog-id=57 op=UNLOAD Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.693000 audit: BPF prog-id=102 op=LOAD Feb 12 20:24:39.693000 audit: BPF prog-id=69 op=UNLOAD Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit: BPF prog-id=103 op=LOAD Feb 12 20:24:39.695000 audit: BPF prog-id=58 op=UNLOAD Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit: BPF prog-id=104 op=LOAD Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.695000 audit: BPF prog-id=105 op=LOAD Feb 12 20:24:39.695000 audit: BPF prog-id=59 op=UNLOAD Feb 12 20:24:39.695000 audit: BPF prog-id=60 op=UNLOAD Feb 12 20:24:39.704116 systemd[1]: Stopping kubelet.service... Feb 12 20:24:39.704525 kubelet[1659]: I0212 20:24:39.704109 1659 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 20:24:39.725516 systemd[1]: kubelet.service: Deactivated successfully. Feb 12 20:24:39.725670 systemd[1]: Stopped kubelet.service. Feb 12 20:24:39.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:39.727342 systemd[1]: Started kubelet.service. Feb 12 20:24:39.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:39.799251 kubelet[2037]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Feb 12 20:24:39.799251 kubelet[2037]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:24:39.799603 kubelet[2037]: I0212 20:24:39.799266 2037 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 20:24:39.800346 kubelet[2037]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Feb 12 20:24:39.800346 kubelet[2037]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:24:39.802785 kubelet[2037]: I0212 20:24:39.802761 2037 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Feb 12 20:24:39.802785 kubelet[2037]: I0212 20:24:39.802778 2037 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 20:24:39.802964 kubelet[2037]: I0212 20:24:39.802945 2037 server.go:836] "Client rotation is on, will bootstrap in background" Feb 12 20:24:39.803976 kubelet[2037]: I0212 20:24:39.803956 2037 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 12 20:24:39.804576 kubelet[2037]: I0212 20:24:39.804557 2037 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809208 2037 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809486 2037 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809595 2037 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809623 2037 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809645 2037 container_manager_linux.go:308] "Creating device plugin manager" Feb 12 20:24:39.810794 kubelet[2037]: I0212 20:24:39.809685 2037 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:24:39.813299 kubelet[2037]: I0212 20:24:39.813193 2037 kubelet.go:398] "Attempting to sync node with API server" Feb 12 20:24:39.813299 kubelet[2037]: I0212 20:24:39.813213 2037 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 20:24:39.813299 kubelet[2037]: I0212 20:24:39.813237 2037 kubelet.go:297] "Adding apiserver pod source" Feb 12 20:24:39.813299 kubelet[2037]: I0212 20:24:39.813250 2037 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 20:24:39.815305 kubelet[2037]: I0212 20:24:39.814081 2037 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 20:24:39.815305 kubelet[2037]: I0212 20:24:39.814457 2037 server.go:1186] "Started kubelet" Feb 12 20:24:39.815000 audit[2037]: AVC avc: denied { mac_admin } for pid=2037 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.815000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:39.815000 audit[2037]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000225b60 a1=c0005d60f0 a2=c000225b30 a3=25 items=0 ppid=1 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:39.815000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:39.815000 audit[2037]: AVC avc: denied { mac_admin } for pid=2037 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.815000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:39.815000 audit[2037]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00085c140 a1=c0005d6108 a2=c000225bf0 a3=25 items=0 ppid=1 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:39.815000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:39.816026 kubelet[2037]: I0212 20:24:39.815786 2037 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 20:24:39.816026 kubelet[2037]: I0212 20:24:39.815821 2037 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 20:24:39.816026 kubelet[2037]: I0212 20:24:39.815840 2037 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 20:24:39.817315 kubelet[2037]: I0212 20:24:39.817294 2037 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 20:24:39.817873 kubelet[2037]: I0212 20:24:39.817848 2037 server.go:451] "Adding debug handlers to kubelet server" Feb 12 20:24:39.821181 kubelet[2037]: E0212 20:24:39.821147 2037 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 20:24:39.821181 kubelet[2037]: E0212 20:24:39.821175 2037 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 20:24:39.821990 kubelet[2037]: I0212 20:24:39.821969 2037 volume_manager.go:293] "Starting Kubelet Volume Manager" Feb 12 20:24:39.823871 kubelet[2037]: I0212 20:24:39.823850 2037 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 12 20:24:39.852952 kubelet[2037]: I0212 20:24:39.852930 2037 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 12 20:24:39.866655 kubelet[2037]: I0212 20:24:39.866625 2037 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 20:24:39.866655 kubelet[2037]: I0212 20:24:39.866644 2037 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 20:24:39.866775 kubelet[2037]: I0212 20:24:39.866666 2037 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:24:39.866820 kubelet[2037]: I0212 20:24:39.866799 2037 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 12 20:24:39.866820 kubelet[2037]: I0212 20:24:39.866817 2037 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 12 20:24:39.866820 kubelet[2037]: I0212 20:24:39.866823 2037 policy_none.go:49] "None policy: Start" Feb 12 20:24:39.867223 kubelet[2037]: I0212 20:24:39.867201 2037 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 20:24:39.867223 kubelet[2037]: I0212 20:24:39.867220 2037 state_mem.go:35] "Initializing new in-memory state store" Feb 12 20:24:39.867367 kubelet[2037]: I0212 20:24:39.867345 2037 state_mem.go:75] "Updated machine memory state" Feb 12 20:24:39.870218 kubelet[2037]: I0212 20:24:39.870196 2037 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 20:24:39.869000 audit[2037]: AVC avc: denied { mac_admin } for pid=2037 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:39.869000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:24:39.869000 audit[2037]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0013066c0 a1=c00128d410 a2=c001306690 a3=25 items=0 ppid=1 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:39.869000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:24:39.870441 kubelet[2037]: I0212 20:24:39.870256 2037 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 20:24:39.870441 kubelet[2037]: I0212 20:24:39.870428 2037 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 20:24:39.878398 kubelet[2037]: I0212 20:24:39.878375 2037 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 12 20:24:39.878398 kubelet[2037]: I0212 20:24:39.878395 2037 status_manager.go:176] "Starting to sync pod status with apiserver" Feb 12 20:24:39.878484 kubelet[2037]: I0212 20:24:39.878412 2037 kubelet.go:2113] "Starting kubelet main sync loop" Feb 12 20:24:39.878484 kubelet[2037]: E0212 20:24:39.878445 2037 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Feb 12 20:24:39.926652 kubelet[2037]: I0212 20:24:39.926620 2037 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 12 20:24:39.932264 kubelet[2037]: I0212 20:24:39.932230 2037 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Feb 12 20:24:39.932428 kubelet[2037]: I0212 20:24:39.932319 2037 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 12 20:24:39.979064 kubelet[2037]: I0212 20:24:39.978941 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:39.979064 kubelet[2037]: I0212 20:24:39.979032 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:39.980502 kubelet[2037]: I0212 20:24:39.980488 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:39.984048 kubelet[2037]: E0212 20:24:39.984026 2037 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:40.025430 kubelet[2037]: I0212 20:24:40.025390 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:40.025430 kubelet[2037]: I0212 20:24:40.025437 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:40.025594 kubelet[2037]: I0212 20:24:40.025464 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:40.025594 kubelet[2037]: I0212 20:24:40.025501 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/72ae17a74a2eae76daac6d298477aff0-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"72ae17a74a2eae76daac6d298477aff0\") " pod="kube-system/kube-scheduler-localhost" Feb 12 20:24:40.025594 kubelet[2037]: I0212 20:24:40.025543 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:40.025594 kubelet[2037]: I0212 20:24:40.025574 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:40.025697 kubelet[2037]: I0212 20:24:40.025598 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:40.025697 kubelet[2037]: I0212 20:24:40.025616 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/550020dd9f101bcc23e1d3c651841c4d-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"550020dd9f101bcc23e1d3c651841c4d\") " pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:40.025697 kubelet[2037]: I0212 20:24:40.025637 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d20dd2a198325709e09b04974ab0157b-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d20dd2a198325709e09b04974ab0157b\") " pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:40.218049 kubelet[2037]: E0212 20:24:40.218016 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:40.285423 kubelet[2037]: E0212 20:24:40.285287 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:40.317969 kubelet[2037]: E0212 20:24:40.317933 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:40.814240 kubelet[2037]: I0212 20:24:40.814186 2037 apiserver.go:52] "Watching apiserver" Feb 12 20:24:40.824610 kubelet[2037]: I0212 20:24:40.824572 2037 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 12 20:24:40.829826 kubelet[2037]: I0212 20:24:40.829794 2037 reconciler.go:41] "Reconciler: start to sync state" Feb 12 20:24:41.131825 kubelet[2037]: E0212 20:24:41.131709 2037 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Feb 12 20:24:41.132157 kubelet[2037]: E0212 20:24:41.132135 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:41.422960 kubelet[2037]: E0212 20:24:41.422843 2037 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Feb 12 20:24:41.423353 kubelet[2037]: E0212 20:24:41.423250 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:41.648453 kubelet[2037]: E0212 20:24:41.648413 2037 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Feb 12 20:24:41.648774 kubelet[2037]: E0212 20:24:41.648750 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:41.826147 kubelet[2037]: I0212 20:24:41.826039 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.825999391 pod.CreationTimestamp="2024-02-12 20:24:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:41.825825783 +0000 UTC m=+2.093964268" watchObservedRunningTime="2024-02-12 20:24:41.825999391 +0000 UTC m=+2.094137866" Feb 12 20:24:41.889889 kubelet[2037]: E0212 20:24:41.889868 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:41.890083 kubelet[2037]: E0212 20:24:41.890066 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:41.890526 kubelet[2037]: E0212 20:24:41.890508 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:42.618452 kubelet[2037]: I0212 20:24:42.618407 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.618372854 pod.CreationTimestamp="2024-02-12 20:24:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:42.618260977 +0000 UTC m=+2.886399452" watchObservedRunningTime="2024-02-12 20:24:42.618372854 +0000 UTC m=+2.886511319" Feb 12 20:24:42.618687 kubelet[2037]: I0212 20:24:42.618490 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.618474432 pod.CreationTimestamp="2024-02-12 20:24:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:42.219182625 +0000 UTC m=+2.487321101" watchObservedRunningTime="2024-02-12 20:24:42.618474432 +0000 UTC m=+2.886612907" Feb 12 20:24:42.891715 kubelet[2037]: E0212 20:24:42.891606 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:44.721827 sudo[1251]: pam_unix(sudo:session): session closed for user root Feb 12 20:24:44.720000 audit[1251]: USER_END pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.730392 kernel: kauditd_printk_skb: 250 callbacks suppressed Feb 12 20:24:44.730455 kernel: audit: type=1106 audit(1707769484.720:955): pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.731019 sshd[1248]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:44.733210 systemd[1]: sshd@6-10.0.0.74:22-10.0.0.1:34860.service: Deactivated successfully. Feb 12 20:24:44.720000 audit[1251]: CRED_DISP pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.733834 systemd[1]: session-7.scope: Deactivated successfully. Feb 12 20:24:44.733962 systemd[1]: session-7.scope: Consumed 3.134s CPU time. Feb 12 20:24:44.734492 systemd-logind[1109]: Session 7 logged out. Waiting for processes to exit. Feb 12 20:24:44.735068 systemd-logind[1109]: Removed session 7. Feb 12 20:24:44.736291 kernel: audit: type=1104 audit(1707769484.720:956): pid=1251 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.736327 kernel: audit: type=1106 audit(1707769484.730:957): pid=1248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:44.730000 audit[1248]: USER_END pid=1248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:44.730000 audit[1248]: CRED_DISP pid=1248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:44.742628 kernel: audit: type=1104 audit(1707769484.730:958): pid=1248 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:24:44.742655 kernel: audit: type=1131 audit(1707769484.732:959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.74:22-10.0.0.1:34860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.74:22-10.0.0.1:34860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:45.201650 kubelet[2037]: E0212 20:24:45.201553 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:45.894248 kubelet[2037]: E0212 20:24:45.894222 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:47.051490 kubelet[2037]: E0212 20:24:47.051459 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:47.897065 kubelet[2037]: E0212 20:24:47.897038 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:48.898511 kubelet[2037]: E0212 20:24:48.898457 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:49.932409 update_engine[1112]: I0212 20:24:49.932351 1112 update_attempter.cc:509] Updating boot flags... Feb 12 20:24:51.246763 kubelet[2037]: E0212 20:24:51.246723 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:52.942000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.942000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ab0d20 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.950387 kernel: audit: type=1400 audit(1707769492.942:960): avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.950443 kernel: audit: type=1300 audit(1707769492.942:960): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ab0d20 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.950464 kernel: audit: type=1327 audit(1707769492.942:960): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.942000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.953125 kernel: audit: type=1400 audit(1707769492.943:961): avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.943000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.943000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00081bde0 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.958807 kernel: audit: type=1300 audit(1707769492.943:961): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00081bde0 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.958849 kernel: audit: type=1327 audit(1707769492.943:961): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.961571 kernel: audit: type=1400 audit(1707769492.944:962): avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.944000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.964076 kernel: audit: type=1300 audit(1707769492.944:962): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00081be20 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.944000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00081be20 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.970454 kernel: audit: type=1327 audit(1707769492.944:962): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:52.970501 kernel: audit: type=1400 audit(1707769492.944:963): avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.944000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:52.944000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000faac20 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:53.444000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 12 20:24:53.444000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ae45c0 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:24:53.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:53.887261 kubelet[2037]: I0212 20:24:53.887228 2037 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 12 20:24:53.887681 env[1127]: time="2024-02-12T20:24:53.887617145Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 12 20:24:53.887922 kubelet[2037]: I0212 20:24:53.887771 2037 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 12 20:24:54.658032 kubelet[2037]: I0212 20:24:54.657987 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:54.664302 systemd[1]: Created slice kubepods-besteffort-podf7e9db66_bda7_447b_bd2a_06093ba86f11.slice. Feb 12 20:24:54.720653 kubelet[2037]: I0212 20:24:54.720613 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f7e9db66-bda7-447b-bd2a-06093ba86f11-xtables-lock\") pod \"kube-proxy-5469f\" (UID: \"f7e9db66-bda7-447b-bd2a-06093ba86f11\") " pod="kube-system/kube-proxy-5469f" Feb 12 20:24:54.720653 kubelet[2037]: I0212 20:24:54.720651 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f7e9db66-bda7-447b-bd2a-06093ba86f11-lib-modules\") pod \"kube-proxy-5469f\" (UID: \"f7e9db66-bda7-447b-bd2a-06093ba86f11\") " pod="kube-system/kube-proxy-5469f" Feb 12 20:24:54.720653 kubelet[2037]: I0212 20:24:54.720669 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f7e9db66-bda7-447b-bd2a-06093ba86f11-kube-proxy\") pod \"kube-proxy-5469f\" (UID: \"f7e9db66-bda7-447b-bd2a-06093ba86f11\") " pod="kube-system/kube-proxy-5469f" Feb 12 20:24:54.720929 kubelet[2037]: I0212 20:24:54.720689 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gz9sz\" (UniqueName: \"kubernetes.io/projected/f7e9db66-bda7-447b-bd2a-06093ba86f11-kube-api-access-gz9sz\") pod \"kube-proxy-5469f\" (UID: \"f7e9db66-bda7-447b-bd2a-06093ba86f11\") " pod="kube-system/kube-proxy-5469f" Feb 12 20:24:54.973555 kubelet[2037]: E0212 20:24:54.973427 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:54.974168 env[1127]: time="2024-02-12T20:24:54.974116327Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5469f,Uid:f7e9db66-bda7-447b-bd2a-06093ba86f11,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:55.021236 kubelet[2037]: I0212 20:24:55.021178 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:55.032747 env[1127]: time="2024-02-12T20:24:55.032668498Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:55.032747 env[1127]: time="2024-02-12T20:24:55.032709676Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:55.032747 env[1127]: time="2024-02-12T20:24:55.032722100Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:55.032731 systemd[1]: Created slice kubepods-besteffort-pod7b75502a_5e1c_4699_b062_087bf71e029f.slice. Feb 12 20:24:55.034175 env[1127]: time="2024-02-12T20:24:55.034130372Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a pid=2171 runtime=io.containerd.runc.v2 Feb 12 20:24:55.046039 systemd[1]: run-containerd-runc-k8s.io-5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a-runc.Oj3RNc.mount: Deactivated successfully. Feb 12 20:24:55.047494 systemd[1]: Started cri-containerd-5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a.scope. Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.055000 audit: BPF prog-id=106 op=LOAD Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363063343763353531313530663466353236613266313833313662 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363063343763353531313530663466353236613266313833313662 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.056000 audit: BPF prog-id=107 op=LOAD Feb 12 20:24:55.056000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001ddce0 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363063343763353531313530663466353236613266313833313662 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit: BPF prog-id=108 op=LOAD Feb 12 20:24:55.057000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001ddd28 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363063343763353531313530663466353236613266313833313662 Feb 12 20:24:55.057000 audit: BPF prog-id=108 op=UNLOAD Feb 12 20:24:55.057000 audit: BPF prog-id=107 op=UNLOAD Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.057000 audit: BPF prog-id=109 op=LOAD Feb 12 20:24:55.057000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003c6138 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531363063343763353531313530663466353236613266313833313662 Feb 12 20:24:55.071196 env[1127]: time="2024-02-12T20:24:55.070425894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5469f,Uid:f7e9db66-bda7-447b-bd2a-06093ba86f11,Namespace:kube-system,Attempt:0,} returns sandbox id \"5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a\"" Feb 12 20:24:55.071425 kubelet[2037]: E0212 20:24:55.071147 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:55.073338 env[1127]: time="2024-02-12T20:24:55.073230756Z" level=info msg="CreateContainer within sandbox \"5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 12 20:24:55.123550 kubelet[2037]: I0212 20:24:55.123489 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sskmb\" (UniqueName: \"kubernetes.io/projected/7b75502a-5e1c-4699-b062-087bf71e029f-kube-api-access-sskmb\") pod \"tigera-operator-cfc98749c-2l7ww\" (UID: \"7b75502a-5e1c-4699-b062-087bf71e029f\") " pod="tigera-operator/tigera-operator-cfc98749c-2l7ww" Feb 12 20:24:55.123550 kubelet[2037]: I0212 20:24:55.123557 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7b75502a-5e1c-4699-b062-087bf71e029f-var-lib-calico\") pod \"tigera-operator-cfc98749c-2l7ww\" (UID: \"7b75502a-5e1c-4699-b062-087bf71e029f\") " pod="tigera-operator/tigera-operator-cfc98749c-2l7ww" Feb 12 20:24:55.125447 env[1127]: time="2024-02-12T20:24:55.125382877Z" level=info msg="CreateContainer within sandbox \"5160c47c551150f4f526a2f18316bdc6d4856337338ca12bc4bc9e36abdf222a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"b0536d5f53d2cf8154ef7dbf9ce6f14743e54e45421eab4a27b6fd2719bdfe9d\"" Feb 12 20:24:55.127411 env[1127]: time="2024-02-12T20:24:55.127369420Z" level=info msg="StartContainer for \"b0536d5f53d2cf8154ef7dbf9ce6f14743e54e45421eab4a27b6fd2719bdfe9d\"" Feb 12 20:24:55.148050 systemd[1]: Started cri-containerd-b0536d5f53d2cf8154ef7dbf9ce6f14743e54e45421eab4a27b6fd2719bdfe9d.scope. Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff5e2698ea8 items=0 ppid=2171 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353336643566353364326366383135346566376462663963653666 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.162000 audit: BPF prog-id=110 op=LOAD Feb 12 20:24:55.162000 audit[2212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000096ff8 items=0 ppid=2171 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353336643566353364326366383135346566376462663963653666 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit: BPF prog-id=111 op=LOAD Feb 12 20:24:55.163000 audit[2212]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000097048 items=0 ppid=2171 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353336643566353364326366383135346566376462663963653666 Feb 12 20:24:55.163000 audit: BPF prog-id=111 op=UNLOAD Feb 12 20:24:55.163000 audit: BPF prog-id=110 op=UNLOAD Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.163000 audit: BPF prog-id=112 op=LOAD Feb 12 20:24:55.163000 audit[2212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000970d8 items=0 ppid=2171 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353336643566353364326366383135346566376462663963653666 Feb 12 20:24:55.178181 env[1127]: time="2024-02-12T20:24:55.178120703Z" level=info msg="StartContainer for \"b0536d5f53d2cf8154ef7dbf9ce6f14743e54e45421eab4a27b6fd2719bdfe9d\" returns successfully" Feb 12 20:24:55.222000 audit[2262]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.222000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7c602970 a2=0 a3=7ffc7c60295c items=0 ppid=2223 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 20:24:55.226000 audit[2263]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.226000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe9a10e590 a2=0 a3=7ffe9a10e57c items=0 ppid=2223 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.226000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 20:24:55.226000 audit[2265]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.226000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6a487c00 a2=0 a3=7fff6a487bec items=0 ppid=2223 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.226000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 20:24:55.227000 audit[2266]: NETFILTER_CFG table=nat:62 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.227000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7f796f40 a2=0 a3=7ffc7f796f2c items=0 ppid=2223 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 20:24:55.232000 audit[2267]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.232000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe9aede6b0 a2=0 a3=7ffe9aede69c items=0 ppid=2223 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.232000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 20:24:55.232000 audit[2269]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.232000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea0b8fa10 a2=0 a3=7ffea0b8f9fc items=0 ppid=2223 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 20:24:55.326000 audit[2270]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.326000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe5b1f4880 a2=0 a3=7ffe5b1f486c items=0 ppid=2223 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.326000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 20:24:55.328000 audit[2272]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.328000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc67d31920 a2=0 a3=7ffc67d3190c items=0 ppid=2223 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.328000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 12 20:24:55.332000 audit[2275]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.332000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdc61d1600 a2=0 a3=7ffdc61d15ec items=0 ppid=2223 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 12 20:24:55.333000 audit[2276]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.333000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd249722f0 a2=0 a3=7ffd249722dc items=0 ppid=2223 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 20:24:55.335758 env[1127]: time="2024-02-12T20:24:55.335719480Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-cfc98749c-2l7ww,Uid:7b75502a-5e1c-4699-b062-087bf71e029f,Namespace:tigera-operator,Attempt:0,}" Feb 12 20:24:55.335000 audit[2278]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.335000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff49d561c0 a2=0 a3=7fff49d561ac items=0 ppid=2223 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 20:24:55.335000 audit[2279]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.335000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5329a770 a2=0 a3=7ffd5329a75c items=0 ppid=2223 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 20:24:55.338000 audit[2281]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.338000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffde634840 a2=0 a3=7fffde63482c items=0 ppid=2223 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 20:24:55.341000 audit[2284]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.341000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc46f1b9b0 a2=0 a3=7ffc46f1b99c items=0 ppid=2223 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 12 20:24:55.342000 audit[2285]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.342000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9566e8f0 a2=0 a3=7ffd9566e8dc items=0 ppid=2223 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 20:24:55.344000 audit[2287]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.344000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd5643f30 a2=0 a3=7fffd5643f1c items=0 ppid=2223 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 20:24:55.345000 audit[2288]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.345000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcb18fcc80 a2=0 a3=7ffcb18fcc6c items=0 ppid=2223 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 20:24:55.347000 audit[2294]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.347000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc716263d0 a2=0 a3=7ffc716263bc items=0 ppid=2223 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:24:55.351503 env[1127]: time="2024-02-12T20:24:55.351415712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:55.351503 env[1127]: time="2024-02-12T20:24:55.351462882Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:55.351503 env[1127]: time="2024-02-12T20:24:55.351476768Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:55.351701 env[1127]: time="2024-02-12T20:24:55.351617115Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/24003d31574459da9c6f18008e23fb60e77b911ae0b7b0efb1291b3953a7a89e pid=2299 runtime=io.containerd.runc.v2 Feb 12 20:24:55.350000 audit[2306]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.350000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc5eaa81b0 a2=0 a3=7ffc5eaa819c items=0 ppid=2223 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:24:55.354000 audit[2318]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.354000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffee8be4e70 a2=0 a3=7ffee8be4e5c items=0 ppid=2223 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.354000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 20:24:55.356000 audit[2319]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.356000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc0bfb24e0 a2=0 a3=7ffc0bfb24cc items=0 ppid=2223 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 20:24:55.358000 audit[2325]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.358000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffb3a92da0 a2=0 a3=7fffb3a92d8c items=0 ppid=2223 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:24:55.362738 systemd[1]: Started cri-containerd-24003d31574459da9c6f18008e23fb60e77b911ae0b7b0efb1291b3953a7a89e.scope. Feb 12 20:24:55.362000 audit[2328]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:24:55.362000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffde21a66d0 a2=0 a3=7ffde21a66bc items=0 ppid=2223 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:24:55.372000 audit[2338]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:55.372000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc54001bc0 a2=0 a3=7ffc54001bac items=0 ppid=2223 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.374000 audit: BPF prog-id=113 op=LOAD Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2299 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303033643331353734343539646139633666313830303865323366 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2299 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303033643331353734343539646139633666313830303865323366 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit: BPF prog-id=114 op=LOAD Feb 12 20:24:55.375000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c40d0 items=0 ppid=2299 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303033643331353734343539646139633666313830303865323366 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit: BPF prog-id=115 op=LOAD Feb 12 20:24:55.375000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c4118 items=0 ppid=2299 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303033643331353734343539646139633666313830303865323366 Feb 12 20:24:55.375000 audit: BPF prog-id=115 op=UNLOAD Feb 12 20:24:55.375000 audit: BPF prog-id=114 op=UNLOAD Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:55.375000 audit: BPF prog-id=116 op=LOAD Feb 12 20:24:55.375000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c4528 items=0 ppid=2299 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303033643331353734343539646139633666313830303865323366 Feb 12 20:24:55.378000 audit[2338]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:55.378000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc54001bc0 a2=0 a3=7ffc54001bac items=0 ppid=2223 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.378000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:55.387000 audit[2344]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.387000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe80cab980 a2=0 a3=7ffe80cab96c items=0 ppid=2223 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 20:24:55.390000 audit[2346]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.390000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffca13949f0 a2=0 a3=7ffca13949dc items=0 ppid=2223 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 12 20:24:55.393000 audit[2349]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.393000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc71026230 a2=0 a3=7ffc7102621c items=0 ppid=2223 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 12 20:24:55.395000 audit[2350]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.395000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5f779390 a2=0 a3=7fff5f77937c items=0 ppid=2223 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 20:24:55.397000 audit[2353]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.397000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffa316d0b0 a2=0 a3=7fffa316d09c items=0 ppid=2223 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 20:24:55.398000 audit[2359]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.398000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeaa038a90 a2=0 a3=7ffeaa038a7c items=0 ppid=2223 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 20:24:55.401000 audit[2361]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.401000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdc3402c40 a2=0 a3=7ffdc3402c2c items=0 ppid=2223 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 12 20:24:55.405012 env[1127]: time="2024-02-12T20:24:55.404970244Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-cfc98749c-2l7ww,Uid:7b75502a-5e1c-4699-b062-087bf71e029f,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"24003d31574459da9c6f18008e23fb60e77b911ae0b7b0efb1291b3953a7a89e\"" Feb 12 20:24:55.405000 audit[2364]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.405000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdf14c7870 a2=0 a3=7ffdf14c785c items=0 ppid=2223 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 20:24:55.407208 env[1127]: time="2024-02-12T20:24:55.406434432Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 12 20:24:55.406000 audit[2365]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.406000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5bd53760 a2=0 a3=7fff5bd5374c items=0 ppid=2223 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.406000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 20:24:55.408000 audit[2367]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.408000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff5b9a5c70 a2=0 a3=7fff5b9a5c5c items=0 ppid=2223 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 20:24:55.409000 audit[2368]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.409000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc066d81b0 a2=0 a3=7ffc066d819c items=0 ppid=2223 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 20:24:55.412000 audit[2370]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.412000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc9e4b8a0 a2=0 a3=7ffdc9e4b88c items=0 ppid=2223 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:24:55.414000 audit[2373]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.414000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffca9546340 a2=0 a3=7ffca954632c items=0 ppid=2223 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 20:24:55.417000 audit[2376]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.417000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc4f9a8580 a2=0 a3=7ffc4f9a856c items=0 ppid=2223 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 12 20:24:55.418000 audit[2377]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.418000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd32ae5110 a2=0 a3=7ffd32ae50fc items=0 ppid=2223 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 20:24:55.420000 audit[2379]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.420000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff4ffdcbd0 a2=0 a3=7fff4ffdcbbc items=0 ppid=2223 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:24:55.423000 audit[2382]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:24:55.423000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff99b9f9f0 a2=0 a3=7fff99b9f9dc items=0 ppid=2223 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:24:55.428000 audit[2386]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 20:24:55.428000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffdbda8c480 a2=0 a3=7ffdbda8c46c items=0 ppid=2223 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.428000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:55.428000 audit[2386]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 20:24:55.428000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffdbda8c480 a2=0 a3=7ffdbda8c46c items=0 ppid=2223 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.428000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:55.911413 kubelet[2037]: E0212 20:24:55.911380 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:56.572402 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2150884033.mount: Deactivated successfully. Feb 12 20:24:56.912923 kubelet[2037]: E0212 20:24:56.912810 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:57.727023 env[1127]: time="2024-02-12T20:24:57.726966623Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:57.729244 env[1127]: time="2024-02-12T20:24:57.729197313Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:57.732191 env[1127]: time="2024-02-12T20:24:57.732158683Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:57.734246 env[1127]: time="2024-02-12T20:24:57.734220362Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:57.734917 env[1127]: time="2024-02-12T20:24:57.734880036Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:7bc79e0d3be4fa8c35133127424f9b1ec775af43145b7dd58637905c76084827\"" Feb 12 20:24:57.736501 env[1127]: time="2024-02-12T20:24:57.736475659Z" level=info msg="CreateContainer within sandbox \"24003d31574459da9c6f18008e23fb60e77b911ae0b7b0efb1291b3953a7a89e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 12 20:24:57.751069 env[1127]: time="2024-02-12T20:24:57.751013034Z" level=info msg="CreateContainer within sandbox \"24003d31574459da9c6f18008e23fb60e77b911ae0b7b0efb1291b3953a7a89e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"3c111b04c1634749c0485f044ec5830cf80d34c5954ac30b27e02b76037c42e2\"" Feb 12 20:24:57.752110 env[1127]: time="2024-02-12T20:24:57.751486775Z" level=info msg="StartContainer for \"3c111b04c1634749c0485f044ec5830cf80d34c5954ac30b27e02b76037c42e2\"" Feb 12 20:24:57.765968 systemd[1]: Started cri-containerd-3c111b04c1634749c0485f044ec5830cf80d34c5954ac30b27e02b76037c42e2.scope. Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit: BPF prog-id=117 op=LOAD Feb 12 20:24:57.775000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2299 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363313131623034633136333437343963303438356630343465633538 Feb 12 20:24:57.775000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.775000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2299 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363313131623034633136333437343963303438356630343465633538 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit: BPF prog-id=118 op=LOAD Feb 12 20:24:57.776000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00020d6f0 items=0 ppid=2299 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363313131623034633136333437343963303438356630343465633538 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit: BPF prog-id=119 op=LOAD Feb 12 20:24:57.776000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00020d738 items=0 ppid=2299 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363313131623034633136333437343963303438356630343465633538 Feb 12 20:24:57.776000 audit: BPF prog-id=119 op=UNLOAD Feb 12 20:24:57.776000 audit: BPF prog-id=118 op=UNLOAD Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:57.776000 audit: BPF prog-id=120 op=LOAD Feb 12 20:24:57.776000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00020db48 items=0 ppid=2299 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363313131623034633136333437343963303438356630343465633538 Feb 12 20:24:57.789164 env[1127]: time="2024-02-12T20:24:57.789114523Z" level=info msg="StartContainer for \"3c111b04c1634749c0485f044ec5830cf80d34c5954ac30b27e02b76037c42e2\" returns successfully" Feb 12 20:24:57.921293 kubelet[2037]: I0212 20:24:57.921247 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-5469f" podStartSLOduration=3.9212130370000002 pod.CreationTimestamp="2024-02-12 20:24:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:55.918847269 +0000 UTC m=+16.186985744" watchObservedRunningTime="2024-02-12 20:24:57.921213037 +0000 UTC m=+18.189351513" Feb 12 20:24:59.522000 audit[2453]: NETFILTER_CFG table=filter:103 family=2 entries=13 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.526072 kernel: kauditd_printk_skb: 351 callbacks suppressed Feb 12 20:24:59.526224 kernel: audit: type=1325 audit(1707769499.522:1069): table=filter:103 family=2 entries=13 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.526250 kernel: audit: type=1300 audit(1707769499.522:1069): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffd24601530 a2=0 a3=7ffd2460151c items=0 ppid=2223 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.522000 audit[2453]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffd24601530 a2=0 a3=7ffd2460151c items=0 ppid=2223 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.522000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.531960 kernel: audit: type=1327 audit(1707769499.522:1069): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.522000 audit[2453]: NETFILTER_CFG table=nat:104 family=2 entries=20 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.522000 audit[2453]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd24601530 a2=0 a3=7ffd2460151c items=0 ppid=2223 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.539112 kernel: audit: type=1325 audit(1707769499.522:1070): table=nat:104 family=2 entries=20 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.539171 kernel: audit: type=1300 audit(1707769499.522:1070): arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd24601530 a2=0 a3=7ffd2460151c items=0 ppid=2223 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.539198 kernel: audit: type=1327 audit(1707769499.522:1070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.522000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.559000 audit[2479]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.559000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffecdd5acf0 a2=0 a3=7ffecdd5acdc items=0 ppid=2223 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.567266 kernel: audit: type=1325 audit(1707769499.559:1071): table=filter:105 family=2 entries=14 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.567320 kernel: audit: type=1300 audit(1707769499.559:1071): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffecdd5acf0 a2=0 a3=7ffecdd5acdc items=0 ppid=2223 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.567338 kernel: audit: type=1327 audit(1707769499.559:1071): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.559000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.559000 audit[2479]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.559000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffecdd5acf0 a2=0 a3=7ffecdd5acdc items=0 ppid=2223 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.576351 kernel: audit: type=1325 audit(1707769499.559:1072): table=nat:106 family=2 entries=20 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:59.559000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.627213 kubelet[2037]: I0212 20:24:59.627157 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-cfc98749c-2l7ww" podStartSLOduration=-9.22337203122767e+09 pod.CreationTimestamp="2024-02-12 20:24:54 +0000 UTC" firstStartedPulling="2024-02-12 20:24:55.406016175 +0000 UTC m=+15.674154651" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:57.921420341 +0000 UTC m=+18.189558816" watchObservedRunningTime="2024-02-12 20:24:59.627105919 +0000 UTC m=+19.895244394" Feb 12 20:24:59.627617 kubelet[2037]: I0212 20:24:59.627324 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:59.633071 systemd[1]: Created slice kubepods-besteffort-podfe2932ab_5274_4a2e_b562_b3f00976e4f0.slice. Feb 12 20:24:59.658723 kubelet[2037]: I0212 20:24:59.658676 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fe2932ab-5274-4a2e-b562-b3f00976e4f0-tigera-ca-bundle\") pod \"calico-typha-6b94b9bb46-c8mrb\" (UID: \"fe2932ab-5274-4a2e-b562-b3f00976e4f0\") " pod="calico-system/calico-typha-6b94b9bb46-c8mrb" Feb 12 20:24:59.658723 kubelet[2037]: I0212 20:24:59.658722 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/fe2932ab-5274-4a2e-b562-b3f00976e4f0-typha-certs\") pod \"calico-typha-6b94b9bb46-c8mrb\" (UID: \"fe2932ab-5274-4a2e-b562-b3f00976e4f0\") " pod="calico-system/calico-typha-6b94b9bb46-c8mrb" Feb 12 20:24:59.658885 kubelet[2037]: I0212 20:24:59.658781 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ths2t\" (UniqueName: \"kubernetes.io/projected/fe2932ab-5274-4a2e-b562-b3f00976e4f0-kube-api-access-ths2t\") pod \"calico-typha-6b94b9bb46-c8mrb\" (UID: \"fe2932ab-5274-4a2e-b562-b3f00976e4f0\") " pod="calico-system/calico-typha-6b94b9bb46-c8mrb" Feb 12 20:24:59.746012 kubelet[2037]: I0212 20:24:59.745959 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:59.752665 systemd[1]: Created slice kubepods-besteffort-podb5285c9f_63ab_428b_8635_7edbd95b8ab8.slice. Feb 12 20:24:59.854223 kubelet[2037]: I0212 20:24:59.854179 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:24:59.854444 kubelet[2037]: E0212 20:24:59.854425 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:24:59.859929 kubelet[2037]: I0212 20:24:59.859881 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-lib-modules\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860084 kubelet[2037]: I0212 20:24:59.859934 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/b5285c9f-63ab-428b-8635-7edbd95b8ab8-node-certs\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860084 kubelet[2037]: I0212 20:24:59.859970 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-cni-log-dir\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860084 kubelet[2037]: I0212 20:24:59.859994 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-policysync\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860084 kubelet[2037]: I0212 20:24:59.860019 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-cni-net-dir\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860084 kubelet[2037]: I0212 20:24:59.860047 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b5285c9f-63ab-428b-8635-7edbd95b8ab8-tigera-ca-bundle\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860215 kubelet[2037]: I0212 20:24:59.860070 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-var-run-calico\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860215 kubelet[2037]: I0212 20:24:59.860093 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-cni-bin-dir\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860215 kubelet[2037]: I0212 20:24:59.860119 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-flexvol-driver-host\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860215 kubelet[2037]: I0212 20:24:59.860145 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fsflv\" (UniqueName: \"kubernetes.io/projected/b5285c9f-63ab-428b-8635-7edbd95b8ab8-kube-api-access-fsflv\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860215 kubelet[2037]: I0212 20:24:59.860170 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-xtables-lock\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.860382 kubelet[2037]: I0212 20:24:59.860192 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b5285c9f-63ab-428b-8635-7edbd95b8ab8-var-lib-calico\") pod \"calico-node-d464m\" (UID: \"b5285c9f-63ab-428b-8635-7edbd95b8ab8\") " pod="calico-system/calico-node-d464m" Feb 12 20:24:59.935871 kubelet[2037]: E0212 20:24:59.935840 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:24:59.936400 env[1127]: time="2024-02-12T20:24:59.936366525Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b94b9bb46-c8mrb,Uid:fe2932ab-5274-4a2e-b562-b3f00976e4f0,Namespace:calico-system,Attempt:0,}" Feb 12 20:24:59.960469 kubelet[2037]: I0212 20:24:59.960443 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rn8rr\" (UniqueName: \"kubernetes.io/projected/4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe-kube-api-access-rn8rr\") pod \"csi-node-driver-vxhnl\" (UID: \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\") " pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:24:59.960609 kubelet[2037]: I0212 20:24:59.960488 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe-varrun\") pod \"csi-node-driver-vxhnl\" (UID: \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\") " pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:24:59.960609 kubelet[2037]: I0212 20:24:59.960516 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe-socket-dir\") pod \"csi-node-driver-vxhnl\" (UID: \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\") " pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:24:59.960825 kubelet[2037]: I0212 20:24:59.960807 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe-registration-dir\") pod \"csi-node-driver-vxhnl\" (UID: \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\") " pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:24:59.960897 kubelet[2037]: I0212 20:24:59.960885 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe-kubelet-dir\") pod \"csi-node-driver-vxhnl\" (UID: \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\") " pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:25:00.014316 env[1127]: time="2024-02-12T20:25:00.013716631Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:00.014316 env[1127]: time="2024-02-12T20:25:00.013774099Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:00.014316 env[1127]: time="2024-02-12T20:25:00.013791633Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:00.014316 env[1127]: time="2024-02-12T20:25:00.013979600Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6a4d720f4b008e89ed3cc69bdf9a2a259d4160f636eeb9cd812f51607f765729 pid=2490 runtime=io.containerd.runc.v2 Feb 12 20:25:00.042352 systemd[1]: Started cri-containerd-6a4d720f4b008e89ed3cc69bdf9a2a259d4160f636eeb9cd812f51607f765729.scope. Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.050000 audit: BPF prog-id=121 op=LOAD Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2490 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661346437323066346230303865383965643363633639626466396132 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2490 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661346437323066346230303865383965643363633639626466396132 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit: BPF prog-id=122 op=LOAD Feb 12 20:25:00.052000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000380f70 items=0 ppid=2490 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661346437323066346230303865383965643363633639626466396132 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit: BPF prog-id=123 op=LOAD Feb 12 20:25:00.052000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000380fb8 items=0 ppid=2490 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661346437323066346230303865383965643363633639626466396132 Feb 12 20:25:00.052000 audit: BPF prog-id=123 op=UNLOAD Feb 12 20:25:00.052000 audit: BPF prog-id=122 op=UNLOAD Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.052000 audit: BPF prog-id=124 op=LOAD Feb 12 20:25:00.052000 audit[2501]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003813c8 items=0 ppid=2490 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661346437323066346230303865383965643363633639626466396132 Feb 12 20:25:00.063273 kubelet[2037]: E0212 20:25:00.063223 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.063273 kubelet[2037]: W0212 20:25:00.063259 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.063273 kubelet[2037]: E0212 20:25:00.063298 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.063622 kubelet[2037]: E0212 20:25:00.063508 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.063622 kubelet[2037]: W0212 20:25:00.063537 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.063622 kubelet[2037]: E0212 20:25:00.063546 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.063789 kubelet[2037]: E0212 20:25:00.063766 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.063789 kubelet[2037]: W0212 20:25:00.063779 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.063789 kubelet[2037]: E0212 20:25:00.063794 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.064023 kubelet[2037]: E0212 20:25:00.063991 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.064023 kubelet[2037]: W0212 20:25:00.064002 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.064023 kubelet[2037]: E0212 20:25:00.064016 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.064286 kubelet[2037]: E0212 20:25:00.064185 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.064286 kubelet[2037]: W0212 20:25:00.064195 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.064286 kubelet[2037]: E0212 20:25:00.064222 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.064480 kubelet[2037]: E0212 20:25:00.064447 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.064480 kubelet[2037]: W0212 20:25:00.064473 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.064595 kubelet[2037]: E0212 20:25:00.064502 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.064810 kubelet[2037]: E0212 20:25:00.064776 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.064810 kubelet[2037]: W0212 20:25:00.064790 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.064810 kubelet[2037]: E0212 20:25:00.064804 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.064932 kubelet[2037]: E0212 20:25:00.064918 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.064932 kubelet[2037]: W0212 20:25:00.064925 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.065005 kubelet[2037]: E0212 20:25:00.064938 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065103 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066319 kubelet[2037]: W0212 20:25:00.065112 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065179 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065322 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066319 kubelet[2037]: W0212 20:25:00.065330 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065363 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065613 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066319 kubelet[2037]: W0212 20:25:00.065622 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065689 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066319 kubelet[2037]: E0212 20:25:00.065805 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066725 kubelet[2037]: W0212 20:25:00.065814 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.065904 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.066064 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066725 kubelet[2037]: W0212 20:25:00.066070 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.066140 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.066224 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066725 kubelet[2037]: W0212 20:25:00.066229 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.066242 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.066725 kubelet[2037]: E0212 20:25:00.066455 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.066725 kubelet[2037]: W0212 20:25:00.066466 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067081 kubelet[2037]: E0212 20:25:00.066483 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.067081 kubelet[2037]: E0212 20:25:00.067059 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.067081 kubelet[2037]: W0212 20:25:00.067069 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067200 kubelet[2037]: E0212 20:25:00.067172 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.067538 kubelet[2037]: E0212 20:25:00.067307 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.067538 kubelet[2037]: W0212 20:25:00.067321 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067538 kubelet[2037]: E0212 20:25:00.067399 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.067538 kubelet[2037]: E0212 20:25:00.067501 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.067538 kubelet[2037]: W0212 20:25:00.067508 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067716 kubelet[2037]: E0212 20:25:00.067602 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.067716 kubelet[2037]: E0212 20:25:00.067674 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.067716 kubelet[2037]: W0212 20:25:00.067682 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067815 kubelet[2037]: E0212 20:25:00.067762 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.067850 kubelet[2037]: E0212 20:25:00.067823 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.067850 kubelet[2037]: W0212 20:25:00.067830 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.067942 kubelet[2037]: E0212 20:25:00.067912 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.068020 kubelet[2037]: E0212 20:25:00.067995 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.068020 kubelet[2037]: W0212 20:25:00.068004 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.068020 kubelet[2037]: E0212 20:25:00.068018 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.068215 kubelet[2037]: E0212 20:25:00.068196 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.068215 kubelet[2037]: W0212 20:25:00.068210 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.068320 kubelet[2037]: E0212 20:25:00.068222 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.068430 kubelet[2037]: E0212 20:25:00.068403 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.068430 kubelet[2037]: W0212 20:25:00.068419 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.068430 kubelet[2037]: E0212 20:25:00.068436 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.069635 kubelet[2037]: E0212 20:25:00.069608 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.069635 kubelet[2037]: W0212 20:25:00.069626 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.069769 kubelet[2037]: E0212 20:25:00.069694 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.069826 kubelet[2037]: E0212 20:25:00.069807 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.069826 kubelet[2037]: W0212 20:25:00.069822 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.069909 kubelet[2037]: E0212 20:25:00.069832 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.070145 kubelet[2037]: E0212 20:25:00.070125 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.070145 kubelet[2037]: W0212 20:25:00.070138 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.070236 kubelet[2037]: E0212 20:25:00.070182 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.086370 env[1127]: time="2024-02-12T20:25:00.086237278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6b94b9bb46-c8mrb,Uid:fe2932ab-5274-4a2e-b562-b3f00976e4f0,Namespace:calico-system,Attempt:0,} returns sandbox id \"6a4d720f4b008e89ed3cc69bdf9a2a259d4160f636eeb9cd812f51607f765729\"" Feb 12 20:25:00.087174 kubelet[2037]: E0212 20:25:00.087139 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:00.088163 env[1127]: time="2024-02-12T20:25:00.088119107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 12 20:25:00.165976 kubelet[2037]: E0212 20:25:00.165850 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.165976 kubelet[2037]: W0212 20:25:00.165882 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.165976 kubelet[2037]: E0212 20:25:00.165920 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.166219 kubelet[2037]: E0212 20:25:00.166178 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.166219 kubelet[2037]: W0212 20:25:00.166188 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.166219 kubelet[2037]: E0212 20:25:00.166200 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.237865 kubelet[2037]: E0212 20:25:00.237833 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.237865 kubelet[2037]: W0212 20:25:00.237854 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.238054 kubelet[2037]: E0212 20:25:00.237883 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.266821 kubelet[2037]: E0212 20:25:00.266777 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.266821 kubelet[2037]: W0212 20:25:00.266801 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.266821 kubelet[2037]: E0212 20:25:00.266829 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.355879 kubelet[2037]: E0212 20:25:00.355847 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:00.356549 env[1127]: time="2024-02-12T20:25:00.356503802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d464m,Uid:b5285c9f-63ab-428b-8635-7edbd95b8ab8,Namespace:calico-system,Attempt:0,}" Feb 12 20:25:00.367324 kubelet[2037]: E0212 20:25:00.367296 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.367324 kubelet[2037]: W0212 20:25:00.367319 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.367514 kubelet[2037]: E0212 20:25:00.367339 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.376302 env[1127]: time="2024-02-12T20:25:00.375725116Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:00.376302 env[1127]: time="2024-02-12T20:25:00.375762366Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:00.376302 env[1127]: time="2024-02-12T20:25:00.375772947Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:00.376302 env[1127]: time="2024-02-12T20:25:00.375960102Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60 pid=2561 runtime=io.containerd.runc.v2 Feb 12 20:25:00.387432 systemd[1]: Started cri-containerd-a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60.scope. Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.399000 audit: BPF prog-id=125 op=LOAD Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2561 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613139643435393936323864353830353137363661633030363566 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2561 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613139643435393936323864353830353137363661633030363566 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit: BPF prog-id=126 op=LOAD Feb 12 20:25:00.400000 audit[2572]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001dfd40 items=0 ppid=2561 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613139643435393936323864353830353137363661633030363566 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit: BPF prog-id=127 op=LOAD Feb 12 20:25:00.400000 audit[2572]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001dfd88 items=0 ppid=2561 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613139643435393936323864353830353137363661633030363566 Feb 12 20:25:00.400000 audit: BPF prog-id=127 op=UNLOAD Feb 12 20:25:00.400000 audit: BPF prog-id=126 op=UNLOAD Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:00.400000 audit: BPF prog-id=128 op=LOAD Feb 12 20:25:00.400000 audit[2572]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000316198 items=0 ppid=2561 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613139643435393936323864353830353137363661633030363566 Feb 12 20:25:00.413864 env[1127]: time="2024-02-12T20:25:00.413809783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d464m,Uid:b5285c9f-63ab-428b-8635-7edbd95b8ab8,Namespace:calico-system,Attempt:0,} returns sandbox id \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\"" Feb 12 20:25:00.414418 kubelet[2037]: E0212 20:25:00.414395 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:00.439567 kubelet[2037]: E0212 20:25:00.439461 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:00.439567 kubelet[2037]: W0212 20:25:00.439478 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:00.439567 kubelet[2037]: E0212 20:25:00.439498 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:00.603000 audit[2621]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=2621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:00.603000 audit[2621]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffd83aa2b60 a2=0 a3=7ffd83aa2b4c items=0 ppid=2223 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.603000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:00.603000 audit[2621]: NETFILTER_CFG table=nat:108 family=2 entries=20 op=nft_register_rule pid=2621 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:00.603000 audit[2621]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd83aa2b60 a2=0 a3=7ffd83aa2b4c items=0 ppid=2223 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.603000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:01.789657 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2275502308.mount: Deactivated successfully. Feb 12 20:25:01.879496 kubelet[2037]: E0212 20:25:01.879463 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:03.879250 kubelet[2037]: E0212 20:25:03.879199 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:03.928922 env[1127]: time="2024-02-12T20:25:03.928877069Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:03.931125 env[1127]: time="2024-02-12T20:25:03.931086982Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:03.933194 env[1127]: time="2024-02-12T20:25:03.933164093Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:03.935005 env[1127]: time="2024-02-12T20:25:03.934982705Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:03.936004 env[1127]: time="2024-02-12T20:25:03.935976648Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:b33768e0da1f8a5788a6a5d8ac2dcf15292ea9f3717de450f946c0a055b3532c\"" Feb 12 20:25:03.936973 env[1127]: time="2024-02-12T20:25:03.936650983Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 12 20:25:03.941043 env[1127]: time="2024-02-12T20:25:03.941012900Z" level=info msg="CreateContainer within sandbox \"6a4d720f4b008e89ed3cc69bdf9a2a259d4160f636eeb9cd812f51607f765729\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 12 20:25:03.951456 env[1127]: time="2024-02-12T20:25:03.951416363Z" level=info msg="CreateContainer within sandbox \"6a4d720f4b008e89ed3cc69bdf9a2a259d4160f636eeb9cd812f51607f765729\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"bb7cb46ed36c645d13cfbba1b24484632c54eef6c3e2657e8c373fbd17f39136\"" Feb 12 20:25:03.951767 env[1127]: time="2024-02-12T20:25:03.951742399Z" level=info msg="StartContainer for \"bb7cb46ed36c645d13cfbba1b24484632c54eef6c3e2657e8c373fbd17f39136\"" Feb 12 20:25:03.963934 systemd[1]: Started cri-containerd-bb7cb46ed36c645d13cfbba1b24484632c54eef6c3e2657e8c373fbd17f39136.scope. Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit: BPF prog-id=129 op=LOAD Feb 12 20:25:03.981000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=2490 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262376362343665643336633634356431336366626261316232343438 Feb 12 20:25:03.981000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.981000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=2490 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262376362343665643336633634356431336366626261316232343438 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit: BPF prog-id=130 op=LOAD Feb 12 20:25:03.982000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c0002d5cf0 items=0 ppid=2490 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262376362343665643336633634356431336366626261316232343438 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit: BPF prog-id=131 op=LOAD Feb 12 20:25:03.982000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c0002d5d38 items=0 ppid=2490 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262376362343665643336633634356431336366626261316232343438 Feb 12 20:25:03.982000 audit: BPF prog-id=131 op=UNLOAD Feb 12 20:25:03.982000 audit: BPF prog-id=130 op=UNLOAD Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { perfmon } for pid=2631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit[2631]: AVC avc: denied { bpf } for pid=2631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.982000 audit: BPF prog-id=132 op=LOAD Feb 12 20:25:03.982000 audit[2631]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c0003c0148 items=0 ppid=2490 pid=2631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262376362343665643336633634356431336366626261316232343438 Feb 12 20:25:04.096536 env[1127]: time="2024-02-12T20:25:04.096467329Z" level=info msg="StartContainer for \"bb7cb46ed36c645d13cfbba1b24484632c54eef6c3e2657e8c373fbd17f39136\" returns successfully" Feb 12 20:25:04.928388 kubelet[2037]: E0212 20:25:04.928359 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:04.936763 kubelet[2037]: I0212 20:25:04.936729 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6b94b9bb46-c8mrb" podStartSLOduration=-9.22337203091809e+09 pod.CreationTimestamp="2024-02-12 20:24:59 +0000 UTC" firstStartedPulling="2024-02-12 20:25:00.087855206 +0000 UTC m=+20.355993681" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:04.936449263 +0000 UTC m=+25.204587728" watchObservedRunningTime="2024-02-12 20:25:04.93668546 +0000 UTC m=+25.204823935" Feb 12 20:25:04.980735 kubelet[2037]: E0212 20:25:04.980697 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.980735 kubelet[2037]: W0212 20:25:04.980726 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.980735 kubelet[2037]: E0212 20:25:04.980746 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.980971 kubelet[2037]: E0212 20:25:04.980899 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.980971 kubelet[2037]: W0212 20:25:04.980908 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.980971 kubelet[2037]: E0212 20:25:04.980918 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981157 kubelet[2037]: E0212 20:25:04.981137 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981157 kubelet[2037]: W0212 20:25:04.981148 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.981157 kubelet[2037]: E0212 20:25:04.981156 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981343 kubelet[2037]: E0212 20:25:04.981332 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981343 kubelet[2037]: W0212 20:25:04.981341 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.981398 kubelet[2037]: E0212 20:25:04.981350 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981496 kubelet[2037]: E0212 20:25:04.981478 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981496 kubelet[2037]: W0212 20:25:04.981493 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.981548 kubelet[2037]: E0212 20:25:04.981501 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981642 kubelet[2037]: E0212 20:25:04.981632 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981642 kubelet[2037]: W0212 20:25:04.981641 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.981690 kubelet[2037]: E0212 20:25:04.981649 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981819 kubelet[2037]: E0212 20:25:04.981809 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981819 kubelet[2037]: W0212 20:25:04.981818 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.981866 kubelet[2037]: E0212 20:25:04.981827 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.981957 kubelet[2037]: E0212 20:25:04.981947 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.981957 kubelet[2037]: W0212 20:25:04.981955 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.982004 kubelet[2037]: E0212 20:25:04.981963 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.982094 kubelet[2037]: E0212 20:25:04.982083 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.982094 kubelet[2037]: W0212 20:25:04.982092 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.982143 kubelet[2037]: E0212 20:25:04.982101 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.982238 kubelet[2037]: E0212 20:25:04.982228 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.982238 kubelet[2037]: W0212 20:25:04.982236 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.982298 kubelet[2037]: E0212 20:25:04.982244 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.982393 kubelet[2037]: E0212 20:25:04.982383 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.982393 kubelet[2037]: W0212 20:25:04.982391 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.982617 kubelet[2037]: E0212 20:25:04.982400 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:04.982617 kubelet[2037]: E0212 20:25:04.982526 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:04.982617 kubelet[2037]: W0212 20:25:04.982531 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:04.982617 kubelet[2037]: E0212 20:25:04.982539 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.002032 kubelet[2037]: E0212 20:25:05.002003 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.002032 kubelet[2037]: W0212 20:25:05.002024 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.002170 kubelet[2037]: E0212 20:25:05.002045 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.002318 kubelet[2037]: E0212 20:25:05.002293 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.002318 kubelet[2037]: W0212 20:25:05.002306 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.002318 kubelet[2037]: E0212 20:25:05.002322 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.002591 kubelet[2037]: E0212 20:25:05.002578 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.002591 kubelet[2037]: W0212 20:25:05.002587 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.002641 kubelet[2037]: E0212 20:25:05.002603 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.002795 kubelet[2037]: E0212 20:25:05.002767 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.002795 kubelet[2037]: W0212 20:25:05.002777 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.002795 kubelet[2037]: E0212 20:25:05.002791 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.003056 kubelet[2037]: E0212 20:25:05.003021 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.003056 kubelet[2037]: W0212 20:25:05.003043 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.003130 kubelet[2037]: E0212 20:25:05.003077 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.003353 kubelet[2037]: E0212 20:25:05.003326 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.003353 kubelet[2037]: W0212 20:25:05.003351 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.003442 kubelet[2037]: E0212 20:25:05.003379 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.003564 kubelet[2037]: E0212 20:25:05.003547 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.003564 kubelet[2037]: W0212 20:25:05.003559 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.003645 kubelet[2037]: E0212 20:25:05.003577 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.003730 kubelet[2037]: E0212 20:25:05.003717 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.003730 kubelet[2037]: W0212 20:25:05.003726 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.003779 kubelet[2037]: E0212 20:25:05.003751 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.003880 kubelet[2037]: E0212 20:25:05.003869 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.003880 kubelet[2037]: W0212 20:25:05.003880 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.003941 kubelet[2037]: E0212 20:25:05.003901 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.004023 kubelet[2037]: E0212 20:25:05.004013 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.004023 kubelet[2037]: W0212 20:25:05.004022 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.004071 kubelet[2037]: E0212 20:25:05.004036 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.004202 kubelet[2037]: E0212 20:25:05.004191 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.004202 kubelet[2037]: W0212 20:25:05.004200 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.004249 kubelet[2037]: E0212 20:25:05.004214 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.004469 kubelet[2037]: E0212 20:25:05.004453 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.004469 kubelet[2037]: W0212 20:25:05.004464 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.004544 kubelet[2037]: E0212 20:25:05.004488 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.004647 kubelet[2037]: E0212 20:25:05.004633 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.004647 kubelet[2037]: W0212 20:25:05.004644 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.004699 kubelet[2037]: E0212 20:25:05.004657 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.004836 kubelet[2037]: E0212 20:25:05.004823 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.004836 kubelet[2037]: W0212 20:25:05.004834 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.004882 kubelet[2037]: E0212 20:25:05.004849 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.005034 kubelet[2037]: E0212 20:25:05.005021 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.005034 kubelet[2037]: W0212 20:25:05.005029 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.005034 kubelet[2037]: E0212 20:25:05.005044 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.005272 kubelet[2037]: E0212 20:25:05.005258 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.005272 kubelet[2037]: W0212 20:25:05.005270 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.005355 kubelet[2037]: E0212 20:25:05.005317 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.005497 kubelet[2037]: E0212 20:25:05.005476 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.005497 kubelet[2037]: W0212 20:25:05.005491 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.005571 kubelet[2037]: E0212 20:25:05.005505 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.005657 kubelet[2037]: E0212 20:25:05.005643 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.005657 kubelet[2037]: W0212 20:25:05.005651 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.005657 kubelet[2037]: E0212 20:25:05.005659 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.879609 kubelet[2037]: E0212 20:25:05.879577 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:05.929624 kubelet[2037]: I0212 20:25:05.929582 2037 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 12 20:25:05.930337 kubelet[2037]: E0212 20:25:05.930319 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:05.991035 kubelet[2037]: E0212 20:25:05.990998 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.991035 kubelet[2037]: W0212 20:25:05.991028 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.991214 kubelet[2037]: E0212 20:25:05.991062 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.991428 kubelet[2037]: E0212 20:25:05.991412 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.991428 kubelet[2037]: W0212 20:25:05.991426 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.991527 kubelet[2037]: E0212 20:25:05.991442 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.991661 kubelet[2037]: E0212 20:25:05.991640 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.991661 kubelet[2037]: W0212 20:25:05.991655 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.991714 kubelet[2037]: E0212 20:25:05.991668 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.991925 kubelet[2037]: E0212 20:25:05.991910 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.991925 kubelet[2037]: W0212 20:25:05.991922 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.991999 kubelet[2037]: E0212 20:25:05.991938 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.992144 kubelet[2037]: E0212 20:25:05.992127 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.992144 kubelet[2037]: W0212 20:25:05.992140 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.992225 kubelet[2037]: E0212 20:25:05.992156 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.992432 kubelet[2037]: E0212 20:25:05.992398 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.992432 kubelet[2037]: W0212 20:25:05.992421 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.992623 kubelet[2037]: E0212 20:25:05.992448 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.992701 kubelet[2037]: E0212 20:25:05.992683 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.992701 kubelet[2037]: W0212 20:25:05.992697 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.992790 kubelet[2037]: E0212 20:25:05.992711 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.992896 kubelet[2037]: E0212 20:25:05.992881 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.992896 kubelet[2037]: W0212 20:25:05.992894 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.992981 kubelet[2037]: E0212 20:25:05.992916 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.993076 kubelet[2037]: E0212 20:25:05.993059 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.993076 kubelet[2037]: W0212 20:25:05.993073 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.993244 kubelet[2037]: E0212 20:25:05.993087 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.993315 kubelet[2037]: E0212 20:25:05.993299 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.993349 kubelet[2037]: W0212 20:25:05.993314 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.993349 kubelet[2037]: E0212 20:25:05.993331 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.993556 kubelet[2037]: E0212 20:25:05.993543 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.993556 kubelet[2037]: W0212 20:25:05.993554 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.993606 kubelet[2037]: E0212 20:25:05.993567 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:05.993766 kubelet[2037]: E0212 20:25:05.993743 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:05.993792 kubelet[2037]: W0212 20:25:05.993767 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:05.993792 kubelet[2037]: E0212 20:25:05.993787 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.010124 kubelet[2037]: E0212 20:25:06.010096 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.010124 kubelet[2037]: W0212 20:25:06.010114 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.010227 kubelet[2037]: E0212 20:25:06.010133 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.010409 kubelet[2037]: E0212 20:25:06.010393 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.010409 kubelet[2037]: W0212 20:25:06.010403 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.010465 kubelet[2037]: E0212 20:25:06.010416 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.010683 kubelet[2037]: E0212 20:25:06.010654 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.010683 kubelet[2037]: W0212 20:25:06.010678 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.010748 kubelet[2037]: E0212 20:25:06.010707 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.010925 kubelet[2037]: E0212 20:25:06.010907 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.010925 kubelet[2037]: W0212 20:25:06.010920 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.010978 kubelet[2037]: E0212 20:25:06.010938 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.011117 kubelet[2037]: E0212 20:25:06.011101 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.011117 kubelet[2037]: W0212 20:25:06.011113 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.011167 kubelet[2037]: E0212 20:25:06.011129 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.011348 kubelet[2037]: E0212 20:25:06.011337 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.011348 kubelet[2037]: W0212 20:25:06.011346 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.011401 kubelet[2037]: E0212 20:25:06.011359 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.011692 kubelet[2037]: E0212 20:25:06.011673 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.011739 kubelet[2037]: W0212 20:25:06.011693 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.011739 kubelet[2037]: E0212 20:25:06.011723 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.011946 kubelet[2037]: E0212 20:25:06.011933 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.011946 kubelet[2037]: W0212 20:25:06.011944 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.012018 kubelet[2037]: E0212 20:25:06.011959 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.012139 kubelet[2037]: E0212 20:25:06.012126 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.012139 kubelet[2037]: W0212 20:25:06.012135 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.012211 kubelet[2037]: E0212 20:25:06.012148 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.012365 kubelet[2037]: E0212 20:25:06.012351 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.012396 kubelet[2037]: W0212 20:25:06.012371 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.012396 kubelet[2037]: E0212 20:25:06.012387 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.012615 kubelet[2037]: E0212 20:25:06.012596 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.012615 kubelet[2037]: W0212 20:25:06.012611 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.012685 kubelet[2037]: E0212 20:25:06.012640 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.012885 kubelet[2037]: E0212 20:25:06.012869 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.012885 kubelet[2037]: W0212 20:25:06.012880 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.012955 kubelet[2037]: E0212 20:25:06.012896 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.013085 kubelet[2037]: E0212 20:25:06.013073 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.013085 kubelet[2037]: W0212 20:25:06.013082 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.013132 kubelet[2037]: E0212 20:25:06.013094 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.013262 kubelet[2037]: E0212 20:25:06.013252 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.013262 kubelet[2037]: W0212 20:25:06.013260 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.013328 kubelet[2037]: E0212 20:25:06.013273 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.013476 kubelet[2037]: E0212 20:25:06.013460 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.013476 kubelet[2037]: W0212 20:25:06.013475 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.013526 kubelet[2037]: E0212 20:25:06.013489 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.013690 kubelet[2037]: E0212 20:25:06.013673 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.013690 kubelet[2037]: W0212 20:25:06.013684 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.013787 kubelet[2037]: E0212 20:25:06.013698 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.013962 kubelet[2037]: E0212 20:25:06.013945 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.013962 kubelet[2037]: W0212 20:25:06.013956 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.014064 kubelet[2037]: E0212 20:25:06.013972 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:06.014144 kubelet[2037]: E0212 20:25:06.014134 2037 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:25:06.014144 kubelet[2037]: W0212 20:25:06.014141 2037 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:25:06.014212 kubelet[2037]: E0212 20:25:06.014150 2037 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:25:07.878932 kubelet[2037]: E0212 20:25:07.878897 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:08.456043 env[1127]: time="2024-02-12T20:25:08.455990444Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:08.458143 env[1127]: time="2024-02-12T20:25:08.458102853Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:08.460102 env[1127]: time="2024-02-12T20:25:08.460069746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:08.462110 env[1127]: time="2024-02-12T20:25:08.462079241Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:08.462964 env[1127]: time="2024-02-12T20:25:08.462918805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:6506d2e0be2d5ec9cb8dbe00c4b4f037c67b6ab4ec14a1f0c83333ac51f4da9a\"" Feb 12 20:25:08.464310 env[1127]: time="2024-02-12T20:25:08.464273574Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 12 20:25:08.476756 env[1127]: time="2024-02-12T20:25:08.476716037Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f\"" Feb 12 20:25:08.477383 env[1127]: time="2024-02-12T20:25:08.477311892Z" level=info msg="StartContainer for \"22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f\"" Feb 12 20:25:08.496342 systemd[1]: Started cri-containerd-22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f.scope. Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511286 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 12 20:25:08.511353 kernel: audit: type=1400 audit(1707769508.508:1129): avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511378 kernel: audit: type=1300 audit(1707769508.508:1129): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f96043eb948 items=0 ppid=2561 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.508000 audit[2733]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f96043eb948 items=0 ppid=2561 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232666330343262366130666638386365376662376338646132373834 Feb 12 20:25:08.517269 kernel: audit: type=1327 audit(1707769508.508:1129): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232666330343262366130666638386365376662376338646132373834 Feb 12 20:25:08.517319 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.519213 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.521267 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.527648 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.527697 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.527716 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.531534 kernel: audit: type=1400 audit(1707769508.508:1130): avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.508000 audit: BPF prog-id=133 op=LOAD Feb 12 20:25:08.508000 audit[2733]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003d20a8 items=0 ppid=2561 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232666330343262366130666638386365376662376338646132373834 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.511000 audit: BPF prog-id=134 op=LOAD Feb 12 20:25:08.511000 audit[2733]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003d20f8 items=0 ppid=2561 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232666330343262366130666638386365376662376338646132373834 Feb 12 20:25:08.514000 audit: BPF prog-id=134 op=UNLOAD Feb 12 20:25:08.514000 audit: BPF prog-id=133 op=UNLOAD Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { perfmon } for pid=2733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit[2733]: AVC avc: denied { bpf } for pid=2733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:08.514000 audit: BPF prog-id=135 op=LOAD Feb 12 20:25:08.514000 audit[2733]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003d2188 items=0 ppid=2561 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232666330343262366130666638386365376662376338646132373834 Feb 12 20:25:08.538176 env[1127]: time="2024-02-12T20:25:08.538135825Z" level=info msg="StartContainer for \"22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f\" returns successfully" Feb 12 20:25:08.546050 systemd[1]: cri-containerd-22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f.scope: Deactivated successfully. Feb 12 20:25:08.551000 audit: BPF prog-id=135 op=UNLOAD Feb 12 20:25:08.562531 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f-rootfs.mount: Deactivated successfully. Feb 12 20:25:08.621924 env[1127]: time="2024-02-12T20:25:08.621875075Z" level=info msg="shim disconnected" id=22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f Feb 12 20:25:08.621924 env[1127]: time="2024-02-12T20:25:08.621921654Z" level=warning msg="cleaning up after shim disconnected" id=22fc042b6a0ff88ce7fb7c8da27849d3996c249ac2866b38c01daad6611c4a8f namespace=k8s.io Feb 12 20:25:08.621924 env[1127]: time="2024-02-12T20:25:08.621931592Z" level=info msg="cleaning up dead shim" Feb 12 20:25:08.628549 env[1127]: time="2024-02-12T20:25:08.628512969Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:25:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2771 runtime=io.containerd.runc.v2\n" Feb 12 20:25:08.935898 kubelet[2037]: E0212 20:25:08.935871 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:08.937759 env[1127]: time="2024-02-12T20:25:08.937711074Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 12 20:25:09.879532 kubelet[2037]: E0212 20:25:09.879497 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:10.856241 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1979154433.mount: Deactivated successfully. Feb 12 20:25:11.878920 kubelet[2037]: E0212 20:25:11.878873 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:13.878993 kubelet[2037]: E0212 20:25:13.878961 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:14.052365 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 12 20:25:14.052492 kernel: audit: type=1130 audit(1707769514.047:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.74:22-10.0.0.1:59500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:14.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.74:22-10.0.0.1:59500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:14.048013 systemd[1]: Started sshd@7-10.0.0.74:22-10.0.0.1:59500.service. Feb 12 20:25:14.088000 audit[2790]: USER_ACCT pid=2790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.090555 sshd[2790]: Accepted publickey for core from 10.0.0.1 port 59500 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:14.091000 audit[2790]: CRED_ACQ pid=2790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.092155 sshd[2790]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:14.094657 kernel: audit: type=1101 audit(1707769514.088:1137): pid=2790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.094764 kernel: audit: type=1103 audit(1707769514.091:1138): pid=2790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.094798 kernel: audit: type=1006 audit(1707769514.091:1139): pid=2790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Feb 12 20:25:14.096258 kernel: audit: type=1300 audit(1707769514.091:1139): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf351510 a2=3 a3=0 items=0 ppid=1 pid=2790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:14.091000 audit[2790]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf351510 a2=3 a3=0 items=0 ppid=1 pid=2790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:14.091000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:14.099772 kernel: audit: type=1327 audit(1707769514.091:1139): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:14.099887 systemd[1]: Started session-8.scope. Feb 12 20:25:14.100463 systemd-logind[1109]: New session 8 of user core. Feb 12 20:25:14.106000 audit[2790]: USER_START pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.110300 kernel: audit: type=1105 audit(1707769514.106:1140): pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.110000 audit[2792]: CRED_ACQ pid=2792 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.116480 kernel: audit: type=1103 audit(1707769514.110:1141): pid=2792 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.236898 sshd[2790]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:14.238000 audit[2790]: USER_END pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.239477 systemd[1]: sshd@7-10.0.0.74:22-10.0.0.1:59500.service: Deactivated successfully. Feb 12 20:25:14.240117 systemd[1]: session-8.scope: Deactivated successfully. Feb 12 20:25:14.238000 audit[2790]: CRED_DISP pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.243576 kernel: audit: type=1106 audit(1707769514.238:1142): pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.243627 kernel: audit: type=1104 audit(1707769514.238:1143): pid=2790 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:14.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.74:22-10.0.0.1:59500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:14.244093 systemd-logind[1109]: Session 8 logged out. Waiting for processes to exit. Feb 12 20:25:14.244787 systemd-logind[1109]: Removed session 8. Feb 12 20:25:15.305570 env[1127]: time="2024-02-12T20:25:15.305521645Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:15.307367 env[1127]: time="2024-02-12T20:25:15.307308010Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:15.308857 env[1127]: time="2024-02-12T20:25:15.308818455Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:15.310571 env[1127]: time="2024-02-12T20:25:15.310549635Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:15.311076 env[1127]: time="2024-02-12T20:25:15.311047934Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:8e8d96a874c0e2f137bc6e0ff4b9da4ac2341852e41d99ab81983d329bb87d93\"" Feb 12 20:25:15.312719 env[1127]: time="2024-02-12T20:25:15.312684096Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 12 20:25:15.330934 env[1127]: time="2024-02-12T20:25:15.330898895Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000\"" Feb 12 20:25:15.331225 env[1127]: time="2024-02-12T20:25:15.331204081Z" level=info msg="StartContainer for \"1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000\"" Feb 12 20:25:15.356171 systemd[1]: Started cri-containerd-1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000.scope. Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f7dd6fc1968 items=0 ppid=2561 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:15.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373166636131663739653165383931646531633133623039306666 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit: BPF prog-id=136 op=LOAD Feb 12 20:25:15.369000 audit[2813]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000260be8 items=0 ppid=2561 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:15.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373166636131663739653165383931646531633133623039306666 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit: BPF prog-id=137 op=LOAD Feb 12 20:25:15.369000 audit[2813]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000260c38 items=0 ppid=2561 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:15.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373166636131663739653165383931646531633133623039306666 Feb 12 20:25:15.369000 audit: BPF prog-id=137 op=UNLOAD Feb 12 20:25:15.369000 audit: BPF prog-id=136 op=UNLOAD Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { perfmon } for pid=2813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit[2813]: AVC avc: denied { bpf } for pid=2813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:15.369000 audit: BPF prog-id=138 op=LOAD Feb 12 20:25:15.369000 audit[2813]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000260cc8 items=0 ppid=2561 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:15.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165373166636131663739653165383931646531633133623039306666 Feb 12 20:25:15.418903 env[1127]: time="2024-02-12T20:25:15.418833501Z" level=info msg="StartContainer for \"1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000\" returns successfully" Feb 12 20:25:15.879647 kubelet[2037]: E0212 20:25:15.879609 2037 pod_workers.go:965] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:15.947365 kubelet[2037]: E0212 20:25:15.947337 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:16.590794 systemd[1]: cri-containerd-1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000.scope: Deactivated successfully. Feb 12 20:25:16.595000 audit: BPF prog-id=138 op=UNLOAD Feb 12 20:25:16.606679 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000-rootfs.mount: Deactivated successfully. Feb 12 20:25:16.659472 kubelet[2037]: I0212 20:25:16.659433 2037 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 12 20:25:16.784758 env[1127]: time="2024-02-12T20:25:16.784687257Z" level=info msg="shim disconnected" id=1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000 Feb 12 20:25:16.784758 env[1127]: time="2024-02-12T20:25:16.784748291Z" level=warning msg="cleaning up after shim disconnected" id=1e71fca1f79e1e891de1c13b090ffeb6c2c3eaa6c702fed759d208aaaee65000 namespace=k8s.io Feb 12 20:25:16.784758 env[1127]: time="2024-02-12T20:25:16.784760554Z" level=info msg="cleaning up dead shim" Feb 12 20:25:16.786640 kubelet[2037]: I0212 20:25:16.786603 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:25:16.792877 systemd[1]: Created slice kubepods-burstable-pod4104abc2_c488_4bc1_a792_4cacc8be7337.slice. Feb 12 20:25:16.799419 kubelet[2037]: I0212 20:25:16.799388 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:25:16.803658 env[1127]: time="2024-02-12T20:25:16.803612044Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:25:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2860 runtime=io.containerd.runc.v2\n" Feb 12 20:25:16.803860 kubelet[2037]: I0212 20:25:16.803744 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:25:16.806427 systemd[1]: Created slice kubepods-burstable-poddcc4e108_901b_4012_a257_ebae499de2e2.slice. Feb 12 20:25:16.810210 systemd[1]: Created slice kubepods-besteffort-pode24ae84b_46ad_43ad_bb0e_01eadb1496b1.slice. Feb 12 20:25:16.884852 kubelet[2037]: I0212 20:25:16.884732 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4104abc2-c488-4bc1-a792-4cacc8be7337-config-volume\") pod \"coredns-787d4945fb-tmpb5\" (UID: \"4104abc2-c488-4bc1-a792-4cacc8be7337\") " pod="kube-system/coredns-787d4945fb-tmpb5" Feb 12 20:25:16.884852 kubelet[2037]: I0212 20:25:16.884773 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g75xv\" (UniqueName: \"kubernetes.io/projected/dcc4e108-901b-4012-a257-ebae499de2e2-kube-api-access-g75xv\") pod \"coredns-787d4945fb-f9qss\" (UID: \"dcc4e108-901b-4012-a257-ebae499de2e2\") " pod="kube-system/coredns-787d4945fb-f9qss" Feb 12 20:25:16.884852 kubelet[2037]: I0212 20:25:16.884793 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7xpcm\" (UniqueName: \"kubernetes.io/projected/4104abc2-c488-4bc1-a792-4cacc8be7337-kube-api-access-7xpcm\") pod \"coredns-787d4945fb-tmpb5\" (UID: \"4104abc2-c488-4bc1-a792-4cacc8be7337\") " pod="kube-system/coredns-787d4945fb-tmpb5" Feb 12 20:25:16.885233 kubelet[2037]: I0212 20:25:16.884861 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e24ae84b-46ad-43ad-bb0e-01eadb1496b1-tigera-ca-bundle\") pod \"calico-kube-controllers-7669f565dc-rm2gc\" (UID: \"e24ae84b-46ad-43ad-bb0e-01eadb1496b1\") " pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" Feb 12 20:25:16.885233 kubelet[2037]: I0212 20:25:16.885017 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/dcc4e108-901b-4012-a257-ebae499de2e2-config-volume\") pod \"coredns-787d4945fb-f9qss\" (UID: \"dcc4e108-901b-4012-a257-ebae499de2e2\") " pod="kube-system/coredns-787d4945fb-f9qss" Feb 12 20:25:16.885233 kubelet[2037]: I0212 20:25:16.885096 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-424ns\" (UniqueName: \"kubernetes.io/projected/e24ae84b-46ad-43ad-bb0e-01eadb1496b1-kube-api-access-424ns\") pod \"calico-kube-controllers-7669f565dc-rm2gc\" (UID: \"e24ae84b-46ad-43ad-bb0e-01eadb1496b1\") " pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" Feb 12 20:25:16.951903 kubelet[2037]: E0212 20:25:16.950754 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:16.952100 env[1127]: time="2024-02-12T20:25:16.951809628Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 12 20:25:17.103437 kubelet[2037]: E0212 20:25:17.103392 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:17.103881 env[1127]: time="2024-02-12T20:25:17.103848838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-tmpb5,Uid:4104abc2-c488-4bc1-a792-4cacc8be7337,Namespace:kube-system,Attempt:0,}" Feb 12 20:25:17.108068 kubelet[2037]: E0212 20:25:17.108052 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:17.108467 env[1127]: time="2024-02-12T20:25:17.108426517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-f9qss,Uid:dcc4e108-901b-4012-a257-ebae499de2e2,Namespace:kube-system,Attempt:0,}" Feb 12 20:25:17.315624 env[1127]: time="2024-02-12T20:25:17.315528719Z" level=error msg="Failed to destroy network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.315960 env[1127]: time="2024-02-12T20:25:17.315926468Z" level=error msg="encountered an error cleaning up failed sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.316000 env[1127]: time="2024-02-12T20:25:17.315976613Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-tmpb5,Uid:4104abc2-c488-4bc1-a792-4cacc8be7337,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.316244 kubelet[2037]: E0212 20:25:17.316207 2037 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.316463 kubelet[2037]: E0212 20:25:17.316270 2037 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-tmpb5" Feb 12 20:25:17.316463 kubelet[2037]: E0212 20:25:17.316323 2037 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-tmpb5" Feb 12 20:25:17.316463 kubelet[2037]: E0212 20:25:17.316374 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-tmpb5_kube-system(4104abc2-c488-4bc1-a792-4cacc8be7337)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-tmpb5_kube-system(4104abc2-c488-4bc1-a792-4cacc8be7337)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-tmpb5" podUID=4104abc2-c488-4bc1-a792-4cacc8be7337 Feb 12 20:25:17.320593 env[1127]: time="2024-02-12T20:25:17.320538771Z" level=error msg="Failed to destroy network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.320926 env[1127]: time="2024-02-12T20:25:17.320893309Z" level=error msg="encountered an error cleaning up failed sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.320962 env[1127]: time="2024-02-12T20:25:17.320944946Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-f9qss,Uid:dcc4e108-901b-4012-a257-ebae499de2e2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.321147 kubelet[2037]: E0212 20:25:17.321126 2037 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.321223 kubelet[2037]: E0212 20:25:17.321171 2037 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-f9qss" Feb 12 20:25:17.321223 kubelet[2037]: E0212 20:25:17.321191 2037 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-f9qss" Feb 12 20:25:17.321302 kubelet[2037]: E0212 20:25:17.321237 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-f9qss_kube-system(dcc4e108-901b-4012-a257-ebae499de2e2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-f9qss_kube-system(dcc4e108-901b-4012-a257-ebae499de2e2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-f9qss" podUID=dcc4e108-901b-4012-a257-ebae499de2e2 Feb 12 20:25:17.414863 env[1127]: time="2024-02-12T20:25:17.414818337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f565dc-rm2gc,Uid:e24ae84b-46ad-43ad-bb0e-01eadb1496b1,Namespace:calico-system,Attempt:0,}" Feb 12 20:25:17.469153 env[1127]: time="2024-02-12T20:25:17.469091305Z" level=error msg="Failed to destroy network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.469451 env[1127]: time="2024-02-12T20:25:17.469427999Z" level=error msg="encountered an error cleaning up failed sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.469492 env[1127]: time="2024-02-12T20:25:17.469469667Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f565dc-rm2gc,Uid:e24ae84b-46ad-43ad-bb0e-01eadb1496b1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.469750 kubelet[2037]: E0212 20:25:17.469718 2037 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.469811 kubelet[2037]: E0212 20:25:17.469769 2037 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" Feb 12 20:25:17.469811 kubelet[2037]: E0212 20:25:17.469789 2037 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" Feb 12 20:25:17.469891 kubelet[2037]: E0212 20:25:17.469840 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7669f565dc-rm2gc_calico-system(e24ae84b-46ad-43ad-bb0e-01eadb1496b1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7669f565dc-rm2gc_calico-system(e24ae84b-46ad-43ad-bb0e-01eadb1496b1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" podUID=e24ae84b-46ad-43ad-bb0e-01eadb1496b1 Feb 12 20:25:17.607647 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12-shm.mount: Deactivated successfully. Feb 12 20:25:17.883156 systemd[1]: Created slice kubepods-besteffort-pod4b7a4a7e_41aa_43c0_9c7c_4a6375cb76fe.slice. Feb 12 20:25:17.884651 env[1127]: time="2024-02-12T20:25:17.884614613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vxhnl,Uid:4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe,Namespace:calico-system,Attempt:0,}" Feb 12 20:25:17.930894 env[1127]: time="2024-02-12T20:25:17.930828307Z" level=error msg="Failed to destroy network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.931202 env[1127]: time="2024-02-12T20:25:17.931165642Z" level=error msg="encountered an error cleaning up failed sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.931256 env[1127]: time="2024-02-12T20:25:17.931220976Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vxhnl,Uid:4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.931501 kubelet[2037]: E0212 20:25:17.931477 2037 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.931781 kubelet[2037]: E0212 20:25:17.931538 2037 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:25:17.931781 kubelet[2037]: E0212 20:25:17.931569 2037 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-vxhnl" Feb 12 20:25:17.931781 kubelet[2037]: E0212 20:25:17.931631 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-vxhnl_calico-system(4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-vxhnl_calico-system(4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:17.932875 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa-shm.mount: Deactivated successfully. Feb 12 20:25:17.952427 kubelet[2037]: I0212 20:25:17.952411 2037 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:17.953092 env[1127]: time="2024-02-12T20:25:17.953050043Z" level=info msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" Feb 12 20:25:17.954631 kubelet[2037]: I0212 20:25:17.954335 2037 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:17.954803 env[1127]: time="2024-02-12T20:25:17.954742279Z" level=info msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" Feb 12 20:25:17.957068 kubelet[2037]: I0212 20:25:17.957041 2037 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:17.957605 env[1127]: time="2024-02-12T20:25:17.957572998Z" level=info msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" Feb 12 20:25:17.960543 kubelet[2037]: I0212 20:25:17.960512 2037 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:17.961111 env[1127]: time="2024-02-12T20:25:17.961076314Z" level=info msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" Feb 12 20:25:17.982944 env[1127]: time="2024-02-12T20:25:17.982873410Z" level=error msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" failed" error="failed to destroy network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.983165 kubelet[2037]: E0212 20:25:17.983152 2037 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:17.983248 kubelet[2037]: E0212 20:25:17.983222 2037 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12} Feb 12 20:25:17.983317 kubelet[2037]: E0212 20:25:17.983266 2037 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4104abc2-c488-4bc1-a792-4cacc8be7337\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:25:17.983402 kubelet[2037]: E0212 20:25:17.983320 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4104abc2-c488-4bc1-a792-4cacc8be7337\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-tmpb5" podUID=4104abc2-c488-4bc1-a792-4cacc8be7337 Feb 12 20:25:17.997567 env[1127]: time="2024-02-12T20:25:17.997506729Z" level=error msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" failed" error="failed to destroy network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.997959 kubelet[2037]: E0212 20:25:17.997930 2037 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:17.998042 kubelet[2037]: E0212 20:25:17.997966 2037 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805} Feb 12 20:25:17.998042 kubelet[2037]: E0212 20:25:17.997996 2037 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e24ae84b-46ad-43ad-bb0e-01eadb1496b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:25:17.998042 kubelet[2037]: E0212 20:25:17.998023 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e24ae84b-46ad-43ad-bb0e-01eadb1496b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" podUID=e24ae84b-46ad-43ad-bb0e-01eadb1496b1 Feb 12 20:25:17.998404 env[1127]: time="2024-02-12T20:25:17.998369444Z" level=error msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" failed" error="failed to destroy network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:17.998524 kubelet[2037]: E0212 20:25:17.998513 2037 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:17.998562 kubelet[2037]: E0212 20:25:17.998534 2037 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09} Feb 12 20:25:17.998585 kubelet[2037]: E0212 20:25:17.998572 2037 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dcc4e108-901b-4012-a257-ebae499de2e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:25:17.998632 kubelet[2037]: E0212 20:25:17.998603 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dcc4e108-901b-4012-a257-ebae499de2e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-f9qss" podUID=dcc4e108-901b-4012-a257-ebae499de2e2 Feb 12 20:25:18.006090 env[1127]: time="2024-02-12T20:25:18.006025024Z" level=error msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" failed" error="failed to destroy network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:25:18.006241 kubelet[2037]: E0212 20:25:18.006223 2037 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:18.006346 kubelet[2037]: E0212 20:25:18.006253 2037 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa} Feb 12 20:25:18.006346 kubelet[2037]: E0212 20:25:18.006297 2037 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:25:18.006346 kubelet[2037]: E0212 20:25:18.006323 2037 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-vxhnl" podUID=4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe Feb 12 20:25:19.241645 systemd[1]: Started sshd@8-10.0.0.74:22-10.0.0.1:50442.service. Feb 12 20:25:19.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.74:22-10.0.0.1:50442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:19.242440 kernel: kauditd_printk_skb: 45 callbacks suppressed Feb 12 20:25:19.242512 kernel: audit: type=1130 audit(1707769519.241:1152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.74:22-10.0.0.1:50442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:19.280000 audit[3118]: USER_ACCT pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.280863 sshd[3118]: Accepted publickey for core from 10.0.0.1 port 50442 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:19.284000 audit[3118]: CRED_ACQ pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.285294 kernel: audit: type=1101 audit(1707769519.280:1153): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.285342 kernel: audit: type=1103 audit(1707769519.284:1154): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.285349 sshd[3118]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:19.288887 systemd-logind[1109]: New session 9 of user core. Feb 12 20:25:19.289920 systemd[1]: Started session-9.scope. Feb 12 20:25:19.297296 kernel: audit: type=1006 audit(1707769519.284:1155): pid=3118 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Feb 12 20:25:19.297347 kernel: audit: type=1300 audit(1707769519.284:1155): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2dbcef60 a2=3 a3=0 items=0 ppid=1 pid=3118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:19.297366 kernel: audit: type=1327 audit(1707769519.284:1155): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:19.297408 kernel: audit: type=1105 audit(1707769519.294:1156): pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.284000 audit[3118]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2dbcef60 a2=3 a3=0 items=0 ppid=1 pid=3118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:19.284000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:19.294000 audit[3118]: USER_START pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.295000 audit[3120]: CRED_ACQ pid=3120 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.306498 kernel: audit: type=1103 audit(1707769519.295:1157): pid=3120 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.399731 sshd[3118]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:19.400000 audit[3118]: USER_END pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.402181 systemd[1]: sshd@8-10.0.0.74:22-10.0.0.1:50442.service: Deactivated successfully. Feb 12 20:25:19.403216 systemd[1]: session-9.scope: Deactivated successfully. Feb 12 20:25:19.400000 audit[3118]: CRED_DISP pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.404878 systemd-logind[1109]: Session 9 logged out. Waiting for processes to exit. Feb 12 20:25:19.405593 systemd-logind[1109]: Removed session 9. Feb 12 20:25:19.407529 kernel: audit: type=1106 audit(1707769519.400:1158): pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.407582 kernel: audit: type=1104 audit(1707769519.400:1159): pid=3118 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:19.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.74:22-10.0.0.1:50442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:23.718407 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4182883926.mount: Deactivated successfully. Feb 12 20:25:24.403236 systemd[1]: Started sshd@9-10.0.0.74:22-10.0.0.1:38292.service. Feb 12 20:25:24.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.74:22-10.0.0.1:38292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:24.406272 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:25:24.406337 kernel: audit: type=1130 audit(1707769524.403:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.74:22-10.0.0.1:38292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:24.745000 audit[3134]: USER_ACCT pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.749000 audit[3134]: CRED_ACQ pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.751513 sshd[3134]: Accepted publickey for core from 10.0.0.1 port 38292 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:24.751759 env[1127]: time="2024-02-12T20:25:24.749156536Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:24.750058 sshd[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:24.753311 kernel: audit: type=1101 audit(1707769524.745:1162): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.753368 kernel: audit: type=1103 audit(1707769524.749:1163): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.753551 env[1127]: time="2024-02-12T20:25:24.753509400Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:24.754934 env[1127]: time="2024-02-12T20:25:24.754907829Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:24.755439 systemd[1]: Started session-10.scope. Feb 12 20:25:24.755773 kernel: audit: type=1006 audit(1707769524.749:1164): pid=3134 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 12 20:25:24.755893 kernel: audit: type=1300 audit(1707769524.749:1164): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1af236a0 a2=3 a3=0 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.749000 audit[3134]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1af236a0 a2=3 a3=0 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.756106 systemd-logind[1109]: New session 10 of user core. Feb 12 20:25:24.757382 env[1127]: time="2024-02-12T20:25:24.757348819Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:24.757972 env[1127]: time="2024-02-12T20:25:24.757944097Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:1843802b91be8ff1c1d35ee08461ebe909e7a2199e59396f69886439a372312c\"" Feb 12 20:25:24.762308 kernel: audit: type=1327 audit(1707769524.749:1164): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:24.762412 kernel: audit: type=1105 audit(1707769524.760:1165): pid=3134 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.749000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:24.760000 audit[3134]: USER_START pid=3134 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.769497 env[1127]: time="2024-02-12T20:25:24.769448517Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 12 20:25:24.765000 audit[3137]: CRED_ACQ pid=3137 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.773299 kernel: audit: type=1103 audit(1707769524.765:1166): pid=3137 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.781173 env[1127]: time="2024-02-12T20:25:24.781133837Z" level=info msg="CreateContainer within sandbox \"a0a19d4599628d58051766ac0065f5b9cb761839e552db1d15dadd8eb3bded60\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"33109c850b61c2910a9b2f2d2133d38477c82698f3a798befe79c1c720243226\"" Feb 12 20:25:24.781571 env[1127]: time="2024-02-12T20:25:24.781544750Z" level=info msg="StartContainer for \"33109c850b61c2910a9b2f2d2133d38477c82698f3a798befe79c1c720243226\"" Feb 12 20:25:24.796592 systemd[1]: Started cri-containerd-33109c850b61c2910a9b2f2d2133d38477c82698f3a798befe79c1c720243226.scope. Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f01bc706c38 items=0 ppid=2561 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.821900 kernel: audit: type=1400 audit(1707769524.815:1167): avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.821968 kernel: audit: type=1300 audit(1707769524.815:1167): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f01bc706c38 items=0 ppid=2561 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333313039633835306236316332393130613962326632643231333364 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit: BPF prog-id=139 op=LOAD Feb 12 20:25:24.815000 audit[3147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000306528 items=0 ppid=2561 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333313039633835306236316332393130613962326632643231333364 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit: BPF prog-id=140 op=LOAD Feb 12 20:25:24.815000 audit[3147]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000306578 items=0 ppid=2561 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333313039633835306236316332393130613962326632643231333364 Feb 12 20:25:24.815000 audit: BPF prog-id=140 op=UNLOAD Feb 12 20:25:24.815000 audit: BPF prog-id=139 op=UNLOAD Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { perfmon } for pid=3147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit[3147]: AVC avc: denied { bpf } for pid=3147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:24.815000 audit: BPF prog-id=141 op=LOAD Feb 12 20:25:24.815000 audit[3147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000306608 items=0 ppid=2561 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:24.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333313039633835306236316332393130613962326632643231333364 Feb 12 20:25:24.843212 env[1127]: time="2024-02-12T20:25:24.843145979Z" level=info msg="StartContainer for \"33109c850b61c2910a9b2f2d2133d38477c82698f3a798befe79c1c720243226\" returns successfully" Feb 12 20:25:24.888166 sshd[3134]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:24.888000 audit[3134]: USER_END pid=3134 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.889000 audit[3134]: CRED_DISP pid=3134 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:24.891198 systemd-logind[1109]: Session 10 logged out. Waiting for processes to exit. Feb 12 20:25:24.891761 systemd[1]: sshd@9-10.0.0.74:22-10.0.0.1:38292.service: Deactivated successfully. Feb 12 20:25:24.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.74:22-10.0.0.1:38292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:24.892667 systemd[1]: session-10.scope: Deactivated successfully. Feb 12 20:25:24.893893 systemd-logind[1109]: Removed session 10. Feb 12 20:25:24.913218 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 12 20:25:24.913298 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 12 20:25:24.973732 kubelet[2037]: E0212 20:25:24.973703 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:25.975519 kubelet[2037]: E0212 20:25:25.975482 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:25.990975 systemd[1]: run-containerd-runc-k8s.io-33109c850b61c2910a9b2f2d2133d38477c82698f3a798befe79c1c720243226-runc.CiZY7h.mount: Deactivated successfully. Feb 12 20:25:26.149000 audit[3301]: AVC avc: denied { write } for pid=3301 comm="tee" name="fd" dev="proc" ino=24527 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.149000 audit[3301]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec72ce98b a2=241 a3=1b6 items=1 ppid=3273 pid=3301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.149000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 12 20:25:26.149000 audit: PATH item=0 name="/dev/fd/63" inode=25001 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.150000 audit[3300]: AVC avc: denied { write } for pid=3300 comm="tee" name="fd" dev="proc" ino=26771 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.150000 audit[3300]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6cb1198d a2=241 a3=1b6 items=1 ppid=3279 pid=3300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.150000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 12 20:25:26.150000 audit: PATH item=0 name="/dev/fd/63" inode=24523 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.150000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.152000 audit[3304]: AVC avc: denied { write } for pid=3304 comm="tee" name="fd" dev="proc" ino=24534 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.152000 audit[3304]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc5cfb898b a2=241 a3=1b6 items=1 ppid=3287 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.152000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 12 20:25:26.152000 audit: PATH item=0 name="/dev/fd/63" inode=24524 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.152000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.154000 audit[3310]: AVC avc: denied { write } for pid=3310 comm="tee" name="fd" dev="proc" ino=24538 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.154000 audit[3310]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5811197c a2=241 a3=1b6 items=1 ppid=3285 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.154000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 12 20:25:26.154000 audit: PATH item=0 name="/dev/fd/63" inode=24531 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.154000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.164000 audit[3336]: AVC avc: denied { write } for pid=3336 comm="tee" name="fd" dev="proc" ino=25746 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.164000 audit[3336]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdb254897b a2=241 a3=1b6 items=1 ppid=3274 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.164000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 12 20:25:26.164000 audit: PATH item=0 name="/dev/fd/63" inode=25015 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.164000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.166000 audit[3338]: AVC avc: denied { write } for pid=3338 comm="tee" name="fd" dev="proc" ino=25750 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.166000 audit[3338]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd9d1a098b a2=241 a3=1b6 items=1 ppid=3280 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.166000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 12 20:25:26.166000 audit: PATH item=0 name="/dev/fd/63" inode=24546 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.166000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.193000 audit[3350]: AVC avc: denied { write } for pid=3350 comm="tee" name="fd" dev="proc" ino=25757 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:25:26.193000 audit[3350]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdddc0998c a2=241 a3=1b6 items=1 ppid=3283 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:26.193000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 12 20:25:26.193000 audit: PATH item=0 name="/dev/fd/63" inode=25018 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:25:26.193000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:25:26.977603 kubelet[2037]: E0212 20:25:26.977564 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:28.326663 kubelet[2037]: I0212 20:25:28.326620 2037 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 12 20:25:28.327324 kubelet[2037]: E0212 20:25:28.327304 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:28.336915 kubelet[2037]: I0212 20:25:28.336878 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-d464m" podStartSLOduration=-9.223372007517937e+09 pod.CreationTimestamp="2024-02-12 20:24:59 +0000 UTC" firstStartedPulling="2024-02-12 20:25:00.415165435 +0000 UTC m=+20.683303910" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:24.992414584 +0000 UTC m=+45.260553089" watchObservedRunningTime="2024-02-12 20:25:28.336838283 +0000 UTC m=+48.604976778" Feb 12 20:25:28.381000 audit[3475]: NETFILTER_CFG table=filter:109 family=2 entries=13 op=nft_register_rule pid=3475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:28.381000 audit[3475]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7fff89aa2840 a2=0 a3=7fff89aa282c items=0 ppid=2223 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:28.381000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:28.382000 audit[3475]: NETFILTER_CFG table=nat:110 family=2 entries=27 op=nft_register_chain pid=3475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:28.382000 audit[3475]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7fff89aa2840 a2=0 a3=7fff89aa282c items=0 ppid=2223 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:28.382000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:28.879731 env[1127]: time="2024-02-12T20:25:28.879672428Z" level=info msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.919 [INFO][3493] k8s.go 578: Cleaning up netns ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.919 [INFO][3493] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" iface="eth0" netns="/var/run/netns/cni-3a248097-9325-f924-3730-693cbc232732" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.920 [INFO][3493] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" iface="eth0" netns="/var/run/netns/cni-3a248097-9325-f924-3730-693cbc232732" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.920 [INFO][3493] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" iface="eth0" netns="/var/run/netns/cni-3a248097-9325-f924-3730-693cbc232732" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.920 [INFO][3493] k8s.go 585: Releasing IP address(es) ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.920 [INFO][3493] utils.go 188: Calico CNI releasing IP address ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.957 [INFO][3500] ipam_plugin.go 415: Releasing address using handleID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.957 [INFO][3500] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.957 [INFO][3500] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.965 [WARNING][3500] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.965 [INFO][3500] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.966 [INFO][3500] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:28.969069 env[1127]: 2024-02-12 20:25:28.967 [INFO][3493] k8s.go 591: Teardown processing complete. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:28.969689 env[1127]: time="2024-02-12T20:25:28.969646892Z" level=info msg="TearDown network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" successfully" Feb 12 20:25:28.969689 env[1127]: time="2024-02-12T20:25:28.969679513Z" level=info msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" returns successfully" Feb 12 20:25:28.970743 env[1127]: time="2024-02-12T20:25:28.970703336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f565dc-rm2gc,Uid:e24ae84b-46ad-43ad-bb0e-01eadb1496b1,Namespace:calico-system,Attempt:1,}" Feb 12 20:25:28.971672 systemd[1]: run-netns-cni\x2d3a248097\x2d9325\x2df924\x2d3730\x2d693cbc232732.mount: Deactivated successfully. Feb 12 20:25:28.981336 kubelet[2037]: E0212 20:25:28.981272 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:29.160683 systemd-networkd[1018]: calic1491c614c4: Link UP Feb 12 20:25:29.162403 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:25:29.162510 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic1491c614c4: link becomes ready Feb 12 20:25:29.162393 systemd-networkd[1018]: calic1491c614c4: Gained carrier Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.003 [INFO][3509] utils.go 100: File /var/lib/calico/mtu does not exist Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.013 [INFO][3509] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0 calico-kube-controllers-7669f565dc- calico-system e24ae84b-46ad-43ad-bb0e-01eadb1496b1 768 0 2024-02-12 20:24:59 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7669f565dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7669f565dc-rm2gc eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calic1491c614c4 [] []}} ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.013 [INFO][3509] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.035 [INFO][3521] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" HandleID="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.044 [INFO][3521] ipam_plugin.go 268: Auto assigning IP ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" HandleID="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029fec0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7669f565dc-rm2gc", "timestamp":"2024-02-12 20:25:29.035103155 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.044 [INFO][3521] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.044 [INFO][3521] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.044 [INFO][3521] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.046 [INFO][3521] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.049 [INFO][3521] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.052 [INFO][3521] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.053 [INFO][3521] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.055 [INFO][3521] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.055 [INFO][3521] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.056 [INFO][3521] ipam.go 1682: Creating new handle: k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1 Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.058 [INFO][3521] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.153 [INFO][3521] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.153 [INFO][3521] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" host="localhost" Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.153 [INFO][3521] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:29.172965 env[1127]: 2024-02-12 20:25:29.153 [INFO][3521] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" HandleID="k8s-pod-network.ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.155 [INFO][3509] k8s.go 385: Populated endpoint ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0", GenerateName:"calico-kube-controllers-7669f565dc-", Namespace:"calico-system", SelfLink:"", UID:"e24ae84b-46ad-43ad-bb0e-01eadb1496b1", ResourceVersion:"768", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f565dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7669f565dc-rm2gc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic1491c614c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.156 [INFO][3509] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.156 [INFO][3509] dataplane_linux.go 68: Setting the host side veth name to calic1491c614c4 ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.162 [INFO][3509] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.162 [INFO][3509] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0", GenerateName:"calico-kube-controllers-7669f565dc-", Namespace:"calico-system", SelfLink:"", UID:"e24ae84b-46ad-43ad-bb0e-01eadb1496b1", ResourceVersion:"768", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f565dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1", Pod:"calico-kube-controllers-7669f565dc-rm2gc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic1491c614c4", MAC:"06:16:93:66:02:3b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:29.173940 env[1127]: 2024-02-12 20:25:29.170 [INFO][3509] k8s.go 491: Wrote updated endpoint to datastore ContainerID="ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1" Namespace="calico-system" Pod="calico-kube-controllers-7669f565dc-rm2gc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:29.339261 env[1127]: time="2024-02-12T20:25:29.339164601Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:29.339261 env[1127]: time="2024-02-12T20:25:29.339221668Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:29.339261 env[1127]: time="2024-02-12T20:25:29.339235133Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:29.339469 env[1127]: time="2024-02-12T20:25:29.339356231Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1 pid=3565 runtime=io.containerd.runc.v2 Feb 12 20:25:29.359738 systemd[1]: Started cri-containerd-ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1.scope. Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.381000 audit: BPF prog-id=142 op=LOAD Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376130626563613864333739343734326566633766323363396132 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376130626563613864333739343734326566633766323363396132 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit: BPF prog-id=143 op=LOAD Feb 12 20:25:29.384000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028b0f0 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376130626563613864333739343734326566633766323363396132 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit: BPF prog-id=144 op=LOAD Feb 12 20:25:29.384000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028b138 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376130626563613864333739343734326566633766323363396132 Feb 12 20:25:29.384000 audit: BPF prog-id=144 op=UNLOAD Feb 12 20:25:29.384000 audit: BPF prog-id=143 op=UNLOAD Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { perfmon } for pid=3575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit[3575]: AVC avc: denied { bpf } for pid=3575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.384000 audit: BPF prog-id=145 op=LOAD Feb 12 20:25:29.384000 audit[3575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b548 items=0 ppid=3565 pid=3575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376130626563613864333739343734326566633766323363396132 Feb 12 20:25:29.387680 systemd-resolved[1063]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 12 20:25:29.422016 env[1127]: time="2024-02-12T20:25:29.421904422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7669f565dc-rm2gc,Uid:e24ae84b-46ad-43ad-bb0e-01eadb1496b1,Namespace:calico-system,Attempt:1,} returns sandbox id \"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1\"" Feb 12 20:25:29.423997 env[1127]: time="2024-02-12T20:25:29.423951799Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 12 20:25:29.647559 kernel: audit_log_start: 142 callbacks suppressed Feb 12 20:25:29.647681 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 12 20:25:29.656314 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Feb 12 20:25:29.656380 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.656413 kernel: audit: backlog limit exceeded Feb 12 20:25:29.656557 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.656575 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.657331 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.659821 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.662182 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.664799 kernel: audit: type=1400 audit(1707769529.645:1203): avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit: BPF prog-id=146 op=LOAD Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9f9ac100 a2=70 a3=7f4a85c0f000 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit: BPF prog-id=146 op=UNLOAD Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit: BPF prog-id=147 op=LOAD Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff9f9ac100 a2=70 a3=6e items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit: BPF prog-id=147 op=UNLOAD Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff9f9ac0b0 a2=70 a3=7fff9f9ac100 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit: BPF prog-id=148 op=LOAD Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff9f9ac090 a2=70 a3=7fff9f9ac100 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit: BPF prog-id=148 op=UNLOAD Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9f9ac170 a2=70 a3=0 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff9f9ac160 a2=70 a3=0 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.645000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.645000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff9f9ac1a0 a2=70 a3=0 items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.645000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { perfmon } for pid=3643 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit[3643]: AVC avc: denied { bpf } for pid=3643 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.646000 audit: BPF prog-id=149 op=LOAD Feb 12 20:25:29.646000 audit[3643]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff9f9ac0c0 a2=70 a3=ffffffff items=0 ppid=3588 pid=3643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.646000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:25:29.669000 audit[3654]: AVC avc: denied { bpf } for pid=3654 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.669000 audit[3654]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff95eb5b60 a2=70 a3=208 items=0 ppid=3588 pid=3654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.669000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 20:25:29.669000 audit[3654]: AVC avc: denied { bpf } for pid=3654 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:29.669000 audit[3654]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff95eb5a30 a2=70 a3=3 items=0 ppid=3588 pid=3654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.669000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 20:25:29.675000 audit: BPF prog-id=149 op=UNLOAD Feb 12 20:25:29.712000 audit[3676]: NETFILTER_CFG table=mangle:111 family=2 entries=19 op=nft_register_chain pid=3676 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:29.712000 audit[3676]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffdedab0cb0 a2=0 a3=7ffdedab0c9c items=0 ppid=3588 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.712000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:29.713000 audit[3675]: NETFILTER_CFG table=raw:112 family=2 entries=19 op=nft_register_chain pid=3675 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:29.713000 audit[3675]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffeee276c60 a2=0 a3=55dfff00d000 items=0 ppid=3588 pid=3675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.713000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:29.715000 audit[3677]: NETFILTER_CFG table=nat:113 family=2 entries=16 op=nft_register_chain pid=3677 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:29.715000 audit[3677]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffec1058950 a2=0 a3=55b7d4563000 items=0 ppid=3588 pid=3677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.715000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:29.718000 audit[3680]: NETFILTER_CFG table=filter:114 family=2 entries=71 op=nft_register_chain pid=3680 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:29.718000 audit[3680]: SYSCALL arch=c000003e syscall=46 success=yes exit=36636 a0=3 a1=7ffe8770cf60 a2=0 a3=56124a7fd000 items=0 ppid=3588 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.718000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:29.880235 env[1127]: time="2024-02-12T20:25:29.880187977Z" level=info msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" Feb 12 20:25:29.880593 env[1127]: time="2024-02-12T20:25:29.880229887Z" level=info msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" Feb 12 20:25:29.892313 systemd[1]: Started sshd@10-10.0.0.74:22-10.0.0.1:38296.service. Feb 12 20:25:29.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.74:22-10.0.0.1:38296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:29.971511 systemd[1]: run-containerd-runc-k8s.io-ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1-runc.AT7rPZ.mount: Deactivated successfully. Feb 12 20:25:29.991000 audit[3704]: USER_ACCT pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:29.992112 sshd[3704]: Accepted publickey for core from 10.0.0.1 port 38296 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:29.992000 audit[3704]: CRED_ACQ pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:29.992000 audit[3704]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff339c8570 a2=3 a3=0 items=0 ppid=1 pid=3704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.992000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:29.993524 sshd[3704]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:29.997391 systemd-logind[1109]: New session 11 of user core. Feb 12 20:25:29.997815 systemd[1]: Started session-11.scope. Feb 12 20:25:30.003000 audit[3704]: USER_START pid=3704 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:30.005000 audit[3738]: CRED_ACQ pid=3738 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.950 [INFO][3720] k8s.go 578: Cleaning up netns ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.951 [INFO][3720] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" iface="eth0" netns="/var/run/netns/cni-891a5df8-86dc-190c-3a5a-f702a2ecb550" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.951 [INFO][3720] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" iface="eth0" netns="/var/run/netns/cni-891a5df8-86dc-190c-3a5a-f702a2ecb550" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.951 [INFO][3720] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" iface="eth0" netns="/var/run/netns/cni-891a5df8-86dc-190c-3a5a-f702a2ecb550" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.951 [INFO][3720] k8s.go 585: Releasing IP address(es) ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:29.951 [INFO][3720] utils.go 188: Calico CNI releasing IP address ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.004 [INFO][3732] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.005 [INFO][3732] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.005 [INFO][3732] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.076 [WARNING][3732] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.076 [INFO][3732] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.078 [INFO][3732] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:30.084492 env[1127]: 2024-02-12 20:25:30.080 [INFO][3720] k8s.go 591: Teardown processing complete. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:30.087376 systemd[1]: run-netns-cni\x2d891a5df8\x2d86dc\x2d190c\x2d3a5a\x2df702a2ecb550.mount: Deactivated successfully. Feb 12 20:25:30.088248 env[1127]: time="2024-02-12T20:25:30.088204586Z" level=info msg="TearDown network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" successfully" Feb 12 20:25:30.088360 env[1127]: time="2024-02-12T20:25:30.088336122Z" level=info msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" returns successfully" Feb 12 20:25:30.088770 kubelet[2037]: E0212 20:25:30.088735 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.089847 env[1127]: time="2024-02-12T20:25:30.089421492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-tmpb5,Uid:4104abc2-c488-4bc1-a792-4cacc8be7337,Namespace:kube-system,Attempt:1,}" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.046 [INFO][3710] k8s.go 578: Cleaning up netns ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.046 [INFO][3710] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" iface="eth0" netns="/var/run/netns/cni-508b5f2b-0264-2ab9-9842-dfb7583e9b78" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.046 [INFO][3710] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" iface="eth0" netns="/var/run/netns/cni-508b5f2b-0264-2ab9-9842-dfb7583e9b78" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.047 [INFO][3710] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" iface="eth0" netns="/var/run/netns/cni-508b5f2b-0264-2ab9-9842-dfb7583e9b78" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.047 [INFO][3710] k8s.go 585: Releasing IP address(es) ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.047 [INFO][3710] utils.go 188: Calico CNI releasing IP address ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.083 [INFO][3741] ipam_plugin.go 415: Releasing address using handleID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.084 [INFO][3741] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.084 [INFO][3741] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.092 [WARNING][3741] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.092 [INFO][3741] ipam_plugin.go 443: Releasing address using workloadID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.203 [INFO][3741] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:30.206907 env[1127]: 2024-02-12 20:25:30.205 [INFO][3710] k8s.go 591: Teardown processing complete. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:30.208578 env[1127]: time="2024-02-12T20:25:30.208504164Z" level=info msg="TearDown network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" successfully" Feb 12 20:25:30.208624 env[1127]: time="2024-02-12T20:25:30.208578153Z" level=info msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" returns successfully" Feb 12 20:25:30.209383 kubelet[2037]: E0212 20:25:30.208904 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.212000 audit[3704]: USER_END pid=3704 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:30.212000 audit[3704]: CRED_DISP pid=3704 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:30.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.74:22-10.0.0.1:38296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:30.209431 systemd[1]: run-netns-cni\x2d508b5f2b\x2d0264\x2d2ab9\x2d9842\x2ddfb7583e9b78.mount: Deactivated successfully. Feb 12 20:25:30.235295 env[1127]: time="2024-02-12T20:25:30.209678320Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-f9qss,Uid:dcc4e108-901b-4012-a257-ebae499de2e2,Namespace:kube-system,Attempt:1,}" Feb 12 20:25:30.211651 sshd[3704]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:30.214654 systemd[1]: sshd@10-10.0.0.74:22-10.0.0.1:38296.service: Deactivated successfully. Feb 12 20:25:30.215460 systemd[1]: session-11.scope: Deactivated successfully. Feb 12 20:25:30.216073 systemd-logind[1109]: Session 11 logged out. Waiting for processes to exit. Feb 12 20:25:30.216838 systemd-logind[1109]: Removed session 11. Feb 12 20:25:30.338466 systemd-networkd[1018]: calic1491c614c4: Gained IPv6LL Feb 12 20:25:30.511324 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic755827b7a9: link becomes ready Feb 12 20:25:30.516722 systemd-networkd[1018]: calic755827b7a9: Link UP Feb 12 20:25:30.516848 systemd-networkd[1018]: calic755827b7a9: Gained carrier Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.432 [INFO][3769] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--787d4945fb--f9qss-eth0 coredns-787d4945fb- kube-system dcc4e108-901b-4012-a257-ebae499de2e2 780 0 2024-02-12 20:24:54 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-787d4945fb-f9qss eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic755827b7a9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.432 [INFO][3769] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.468 [INFO][3787] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" HandleID="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.481 [INFO][3787] ipam_plugin.go 268: Auto assigning IP ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" HandleID="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000335200), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-787d4945fb-f9qss", "timestamp":"2024-02-12 20:25:30.468361812 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.481 [INFO][3787] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.481 [INFO][3787] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.481 [INFO][3787] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.483 [INFO][3787] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.486 [INFO][3787] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.491 [INFO][3787] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.493 [INFO][3787] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.495 [INFO][3787] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.495 [INFO][3787] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.497 [INFO][3787] ipam.go 1682: Creating new handle: k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99 Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.501 [INFO][3787] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.505 [INFO][3787] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.505 [INFO][3787] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" host="localhost" Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.505 [INFO][3787] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:30.523388 env[1127]: 2024-02-12 20:25:30.505 [INFO][3787] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" HandleID="k8s-pod-network.71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.507 [INFO][3769] k8s.go 385: Populated endpoint ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--f9qss-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dcc4e108-901b-4012-a257-ebae499de2e2", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-787d4945fb-f9qss", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic755827b7a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.507 [INFO][3769] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.507 [INFO][3769] dataplane_linux.go 68: Setting the host side veth name to calic755827b7a9 ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.510 [INFO][3769] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.511 [INFO][3769] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--f9qss-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dcc4e108-901b-4012-a257-ebae499de2e2", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99", Pod:"coredns-787d4945fb-f9qss", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic755827b7a9", MAC:"b2:c2:ed:61:0c:c0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:30.524304 env[1127]: 2024-02-12 20:25:30.520 [INFO][3769] k8s.go 491: Wrote updated endpoint to datastore ContainerID="71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99" Namespace="kube-system" Pod="coredns-787d4945fb-f9qss" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:30.535320 env[1127]: time="2024-02-12T20:25:30.535238365Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:30.535509 env[1127]: time="2024-02-12T20:25:30.535462345Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:30.535509 env[1127]: time="2024-02-12T20:25:30.535483665Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:30.535848 env[1127]: time="2024-02-12T20:25:30.535737632Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99 pid=3823 runtime=io.containerd.runc.v2 Feb 12 20:25:30.542645 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali19ed5280755: link becomes ready Feb 12 20:25:30.542230 systemd-networkd[1018]: cali19ed5280755: Link UP Feb 12 20:25:30.542382 systemd-networkd[1018]: cali19ed5280755: Gained carrier Feb 12 20:25:30.555585 systemd[1]: Started cri-containerd-71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99.scope. Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.436 [INFO][3760] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--787d4945fb--tmpb5-eth0 coredns-787d4945fb- kube-system 4104abc2-c488-4bc1-a792-4cacc8be7337 779 0 2024-02-12 20:24:54 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-787d4945fb-tmpb5 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali19ed5280755 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.436 [INFO][3760] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.482 [INFO][3793] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" HandleID="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.494 [INFO][3793] ipam_plugin.go 268: Auto assigning IP ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" HandleID="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025db00), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-787d4945fb-tmpb5", "timestamp":"2024-02-12 20:25:30.482499924 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.495 [INFO][3793] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.505 [INFO][3793] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.505 [INFO][3793] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.512 [INFO][3793] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.517 [INFO][3793] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.525 [INFO][3793] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.527 [INFO][3793] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.529 [INFO][3793] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.529 [INFO][3793] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.530 [INFO][3793] ipam.go 1682: Creating new handle: k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7 Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.533 [INFO][3793] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.537 [INFO][3793] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.537 [INFO][3793] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" host="localhost" Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.537 [INFO][3793] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:30.565902 env[1127]: 2024-02-12 20:25:30.537 [INFO][3793] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" HandleID="k8s-pod-network.ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.539 [INFO][3760] k8s.go 385: Populated endpoint ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--tmpb5-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"4104abc2-c488-4bc1-a792-4cacc8be7337", ResourceVersion:"779", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-787d4945fb-tmpb5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19ed5280755", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.539 [INFO][3760] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.539 [INFO][3760] dataplane_linux.go 68: Setting the host side veth name to cali19ed5280755 ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.547 [INFO][3760] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.547 [INFO][3760] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--tmpb5-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"4104abc2-c488-4bc1-a792-4cacc8be7337", ResourceVersion:"779", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7", Pod:"coredns-787d4945fb-tmpb5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19ed5280755", MAC:"7a:0b:9a:f6:50:f5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:30.566512 env[1127]: 2024-02-12 20:25:30.558 [INFO][3760] k8s.go 491: Wrote updated endpoint to datastore ContainerID="ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7" Namespace="kube-system" Pod="coredns-787d4945fb-tmpb5" WorkloadEndpoint="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit: BPF prog-id=150 op=LOAD Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731656266343131373134363631626236373039326532363038336633 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731656266343131373134363631626236373039326532363038336633 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.571000 audit: BPF prog-id=151 op=LOAD Feb 12 20:25:30.571000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003cc730 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731656266343131373134363631626236373039326532363038336633 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit: BPF prog-id=152 op=LOAD Feb 12 20:25:30.572000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003cc778 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731656266343131373134363631626236373039326532363038336633 Feb 12 20:25:30.572000 audit: BPF prog-id=152 op=UNLOAD Feb 12 20:25:30.572000 audit: BPF prog-id=151 op=UNLOAD Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { perfmon } for pid=3834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit[3834]: AVC avc: denied { bpf } for pid=3834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.572000 audit: BPF prog-id=153 op=LOAD Feb 12 20:25:30.572000 audit[3834]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003ccb88 items=0 ppid=3823 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731656266343131373134363631626236373039326532363038336633 Feb 12 20:25:30.573176 systemd-resolved[1063]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 12 20:25:30.579683 env[1127]: time="2024-02-12T20:25:30.579639040Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:30.579828 env[1127]: time="2024-02-12T20:25:30.579804882Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:30.579938 env[1127]: time="2024-02-12T20:25:30.579914849Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:30.580214 env[1127]: time="2024-02-12T20:25:30.580143859Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7 pid=3874 runtime=io.containerd.runc.v2 Feb 12 20:25:30.589000 audit[3889]: NETFILTER_CFG table=filter:115 family=2 entries=40 op=nft_register_chain pid=3889 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:30.589000 audit[3889]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7fff6cebd360 a2=0 a3=7fff6cebd34c items=0 ppid=3588 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.589000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:30.589858 systemd[1]: Started cri-containerd-ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7.scope. Feb 12 20:25:30.600878 systemd-networkd[1018]: vxlan.calico: Link UP Feb 12 20:25:30.600885 systemd-networkd[1018]: vxlan.calico: Gained carrier Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.616000 audit: BPF prog-id=154 op=LOAD Feb 12 20:25:30.617675 env[1127]: time="2024-02-12T20:25:30.615700900Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-f9qss,Uid:dcc4e108-901b-4012-a257-ebae499de2e2,Namespace:kube-system,Attempt:1,} returns sandbox id \"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99\"" Feb 12 20:25:30.617764 kubelet[2037]: E0212 20:25:30.616251 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.617918 env[1127]: time="2024-02-12T20:25:30.617882539Z" level=info msg="CreateContainer within sandbox \"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 20:25:30.617000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.617000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3874 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.617000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616366373033363739663564646561346637393737363631303937 Feb 12 20:25:30.618000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.618000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3874 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616366373033363739663564646561346637393737363631303937 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit: BPF prog-id=155 op=LOAD Feb 12 20:25:30.619000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000293440 items=0 ppid=3874 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616366373033363739663564646561346637393737363631303937 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.619000 audit: BPF prog-id=156 op=LOAD Feb 12 20:25:30.619000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000293488 items=0 ppid=3874 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616366373033363739663564646561346637393737363631303937 Feb 12 20:25:30.620000 audit: BPF prog-id=156 op=UNLOAD Feb 12 20:25:30.620000 audit: BPF prog-id=155 op=UNLOAD Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { perfmon } for pid=3884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit[3884]: AVC avc: denied { bpf } for pid=3884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.620000 audit: BPF prog-id=157 op=LOAD Feb 12 20:25:30.620000 audit[3884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000293898 items=0 ppid=3874 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666616366373033363739663564646561346637393737363631303937 Feb 12 20:25:30.623465 systemd-resolved[1063]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 12 20:25:30.648091 env[1127]: time="2024-02-12T20:25:30.648046359Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-tmpb5,Uid:4104abc2-c488-4bc1-a792-4cacc8be7337,Namespace:kube-system,Attempt:1,} returns sandbox id \"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7\"" Feb 12 20:25:30.649429 kubelet[2037]: E0212 20:25:30.648958 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.651442 env[1127]: time="2024-02-12T20:25:30.651400480Z" level=info msg="CreateContainer within sandbox \"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 20:25:30.652872 env[1127]: time="2024-02-12T20:25:30.652845214Z" level=info msg="CreateContainer within sandbox \"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9f2eb8c2730fac0245f6436210ed2f450984eaa83eefe0d13bd822c0317bac5e\"" Feb 12 20:25:30.653638 env[1127]: time="2024-02-12T20:25:30.653606624Z" level=info msg="StartContainer for \"9f2eb8c2730fac0245f6436210ed2f450984eaa83eefe0d13bd822c0317bac5e\"" Feb 12 20:25:30.670699 env[1127]: time="2024-02-12T20:25:30.670642611Z" level=info msg="CreateContainer within sandbox \"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6b7655d7521552296d8fea063daa5412641c2d5f0675c92e96fc08ccbf58f6c9\"" Feb 12 20:25:30.674000 audit[3933]: NETFILTER_CFG table=filter:116 family=2 entries=40 op=nft_register_chain pid=3933 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:30.674000 audit[3933]: SYSCALL arch=c000003e syscall=46 success=yes exit=20752 a0=3 a1=7fffd7ff13b0 a2=0 a3=7fffd7ff139c items=0 ppid=3588 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.674000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:30.672776 systemd[1]: Started cri-containerd-9f2eb8c2730fac0245f6436210ed2f450984eaa83eefe0d13bd822c0317bac5e.scope. Feb 12 20:25:30.677695 env[1127]: time="2024-02-12T20:25:30.677650506Z" level=info msg="StartContainer for \"6b7655d7521552296d8fea063daa5412641c2d5f0675c92e96fc08ccbf58f6c9\"" Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit: BPF prog-id=158 op=LOAD Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3823 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966326562386332373330666163303234356636343336323130656432 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3823 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966326562386332373330666163303234356636343336323130656432 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.686000 audit: BPF prog-id=159 op=LOAD Feb 12 20:25:30.686000 audit[3927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000324040 items=0 ppid=3823 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966326562386332373330666163303234356636343336323130656432 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit: BPF prog-id=160 op=LOAD Feb 12 20:25:30.687000 audit[3927]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000324088 items=0 ppid=3823 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966326562386332373330666163303234356636343336323130656432 Feb 12 20:25:30.687000 audit: BPF prog-id=160 op=UNLOAD Feb 12 20:25:30.687000 audit: BPF prog-id=159 op=UNLOAD Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { perfmon } for pid=3927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit[3927]: AVC avc: denied { bpf } for pid=3927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.687000 audit: BPF prog-id=161 op=LOAD Feb 12 20:25:30.687000 audit[3927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000324498 items=0 ppid=3823 pid=3927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966326562386332373330666163303234356636343336323130656432 Feb 12 20:25:30.701130 env[1127]: time="2024-02-12T20:25:30.700024861Z" level=info msg="StartContainer for \"9f2eb8c2730fac0245f6436210ed2f450984eaa83eefe0d13bd822c0317bac5e\" returns successfully" Feb 12 20:25:30.700112 systemd[1]: Started cri-containerd-6b7655d7521552296d8fea063daa5412641c2d5f0675c92e96fc08ccbf58f6c9.scope. Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit: BPF prog-id=162 op=LOAD Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3874 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373635356437353231353532323936643866656130363364616135 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3874 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373635356437353231353532323936643866656130363364616135 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.712000 audit: BPF prog-id=163 op=LOAD Feb 12 20:25:30.712000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00029c610 items=0 ppid=3874 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373635356437353231353532323936643866656130363364616135 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit: BPF prog-id=164 op=LOAD Feb 12 20:25:30.713000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00029c658 items=0 ppid=3874 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373635356437353231353532323936643866656130363364616135 Feb 12 20:25:30.713000 audit: BPF prog-id=164 op=UNLOAD Feb 12 20:25:30.713000 audit: BPF prog-id=163 op=UNLOAD Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:30.713000 audit: BPF prog-id=165 op=LOAD Feb 12 20:25:30.713000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00029ca68 items=0 ppid=3874 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:30.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373635356437353231353532323936643866656130363364616135 Feb 12 20:25:30.737261 env[1127]: time="2024-02-12T20:25:30.737208990Z" level=info msg="StartContainer for \"6b7655d7521552296d8fea063daa5412641c2d5f0675c92e96fc08ccbf58f6c9\" returns successfully" Feb 12 20:25:30.986959 kubelet[2037]: E0212 20:25:30.986925 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.988903 kubelet[2037]: E0212 20:25:30.988820 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:30.995391 kubelet[2037]: I0212 20:25:30.995356 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-f9qss" podStartSLOduration=36.995326579 pod.CreationTimestamp="2024-02-12 20:24:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:30.994973376 +0000 UTC m=+51.263111851" watchObservedRunningTime="2024-02-12 20:25:30.995326579 +0000 UTC m=+51.263465044" Feb 12 20:25:31.015290 kubelet[2037]: I0212 20:25:31.015239 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-tmpb5" podStartSLOduration=37.015192719 pod.CreationTimestamp="2024-02-12 20:24:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:31.005164159 +0000 UTC m=+51.273302635" watchObservedRunningTime="2024-02-12 20:25:31.015192719 +0000 UTC m=+51.283331194" Feb 12 20:25:31.046000 audit[4026]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:31.046000 audit[4026]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffe50480cb0 a2=0 a3=7ffe50480c9c items=0 ppid=2223 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:31.046000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:31.047000 audit[4026]: NETFILTER_CFG table=nat:118 family=2 entries=30 op=nft_register_rule pid=4026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:31.047000 audit[4026]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffe50480cb0 a2=0 a3=7ffe50480c9c items=0 ppid=2223 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:31.047000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:31.083000 audit[4052]: NETFILTER_CFG table=filter:119 family=2 entries=9 op=nft_register_rule pid=4052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:31.083000 audit[4052]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff21e752d0 a2=0 a3=7fff21e752bc items=0 ppid=2223 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:31.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:31.088000 audit[4052]: NETFILTER_CFG table=nat:120 family=2 entries=63 op=nft_register_chain pid=4052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:31.088000 audit[4052]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff21e752d0 a2=0 a3=7fff21e752bc items=0 ppid=2223 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:31.088000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:31.746437 systemd-networkd[1018]: calic755827b7a9: Gained IPv6LL Feb 12 20:25:31.810421 systemd-networkd[1018]: cali19ed5280755: Gained IPv6LL Feb 12 20:25:31.990802 kubelet[2037]: E0212 20:25:31.990725 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:31.991179 kubelet[2037]: E0212 20:25:31.990815 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:32.130489 systemd-networkd[1018]: vxlan.calico: Gained IPv6LL Feb 12 20:25:32.879203 env[1127]: time="2024-02-12T20:25:32.879156021Z" level=info msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" Feb 12 20:25:32.992897 kubelet[2037]: E0212 20:25:32.992861 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:32.993236 kubelet[2037]: E0212 20:25:32.992959 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.595 [INFO][4072] k8s.go 578: Cleaning up netns ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.595 [INFO][4072] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" iface="eth0" netns="/var/run/netns/cni-f6a3c915-6820-e7ce-486f-b822b264ac27" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.596 [INFO][4072] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" iface="eth0" netns="/var/run/netns/cni-f6a3c915-6820-e7ce-486f-b822b264ac27" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.596 [INFO][4072] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" iface="eth0" netns="/var/run/netns/cni-f6a3c915-6820-e7ce-486f-b822b264ac27" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.596 [INFO][4072] k8s.go 585: Releasing IP address(es) ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.596 [INFO][4072] utils.go 188: Calico CNI releasing IP address ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.616 [INFO][4079] ipam_plugin.go 415: Releasing address using handleID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.616 [INFO][4079] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.617 [INFO][4079] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.623 [WARNING][4079] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.623 [INFO][4079] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.626 [INFO][4079] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:33.630102 env[1127]: 2024-02-12 20:25:33.628 [INFO][4072] k8s.go 591: Teardown processing complete. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:33.630750 env[1127]: time="2024-02-12T20:25:33.630720338Z" level=info msg="TearDown network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" successfully" Feb 12 20:25:33.630840 env[1127]: time="2024-02-12T20:25:33.630819716Z" level=info msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" returns successfully" Feb 12 20:25:33.632572 systemd[1]: run-netns-cni\x2df6a3c915\x2d6820\x2de7ce\x2d486f\x2db822b264ac27.mount: Deactivated successfully. Feb 12 20:25:33.633650 env[1127]: time="2024-02-12T20:25:33.633629453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vxhnl,Uid:4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe,Namespace:calico-system,Attempt:1,}" Feb 12 20:25:33.870534 systemd-networkd[1018]: calic7cd9b67f1f: Link UP Feb 12 20:25:33.873585 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:25:33.873635 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic7cd9b67f1f: link becomes ready Feb 12 20:25:33.873052 systemd-networkd[1018]: calic7cd9b67f1f: Gained carrier Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.679 [INFO][4087] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--vxhnl-eth0 csi-node-driver- calico-system 4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe 834 0 2024-02-12 20:24:59 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7c77f88967 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-vxhnl eth0 default [] [] [kns.calico-system ksa.calico-system.default] calic7cd9b67f1f [] []}} ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.679 [INFO][4087] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.707 [INFO][4100] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" HandleID="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.716 [INFO][4100] ipam_plugin.go 268: Auto assigning IP ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" HandleID="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029d300), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-vxhnl", "timestamp":"2024-02-12 20:25:33.707307373 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.716 [INFO][4100] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.717 [INFO][4100] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.717 [INFO][4100] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.718 [INFO][4100] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.726 [INFO][4100] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.731 [INFO][4100] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.733 [INFO][4100] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.743 [INFO][4100] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.743 [INFO][4100] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.746 [INFO][4100] ipam.go 1682: Creating new handle: k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.862 [INFO][4100] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.866 [INFO][4100] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.867 [INFO][4100] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" host="localhost" Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.867 [INFO][4100] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:33.885368 env[1127]: 2024-02-12 20:25:33.867 [INFO][4100] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" HandleID="k8s-pod-network.2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.868 [INFO][4087] k8s.go 385: Populated endpoint ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vxhnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7c77f88967", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-vxhnl", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic7cd9b67f1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.868 [INFO][4087] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.868 [INFO][4087] dataplane_linux.go 68: Setting the host side veth name to calic7cd9b67f1f ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.873 [INFO][4087] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.874 [INFO][4087] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vxhnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7c77f88967", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c", Pod:"csi-node-driver-vxhnl", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic7cd9b67f1f", MAC:"ba:c3:72:16:4b:24", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:33.886494 env[1127]: 2024-02-12 20:25:33.882 [INFO][4087] k8s.go 491: Wrote updated endpoint to datastore ContainerID="2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c" Namespace="calico-system" Pod="csi-node-driver-vxhnl" WorkloadEndpoint="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:33.899000 audit[4123]: NETFILTER_CFG table=filter:121 family=2 entries=38 op=nft_register_chain pid=4123 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:25:33.899000 audit[4123]: SYSCALL arch=c000003e syscall=46 success=yes exit=19528 a0=3 a1=7fff3c3072e0 a2=0 a3=7fff3c3072cc items=0 ppid=3588 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.899000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:25:33.914251 env[1127]: time="2024-02-12T20:25:33.913960867Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:25:33.914251 env[1127]: time="2024-02-12T20:25:33.913995292Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:25:33.914251 env[1127]: time="2024-02-12T20:25:33.914004519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:25:33.914251 env[1127]: time="2024-02-12T20:25:33.914086563Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c pid=4131 runtime=io.containerd.runc.v2 Feb 12 20:25:33.929101 systemd[1]: Started cri-containerd-2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c.scope. Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit: BPF prog-id=166 op=LOAD Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4131 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266396666353165636464666465383266376133356265643531383363 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4131 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266396666353165636464666465383266376133356265643531383363 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.943000 audit: BPF prog-id=167 op=LOAD Feb 12 20:25:33.943000 audit[4141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000220f90 items=0 ppid=4131 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266396666353165636464666465383266376133356265643531383363 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit: BPF prog-id=168 op=LOAD Feb 12 20:25:33.944000 audit[4141]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000220fd8 items=0 ppid=4131 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266396666353165636464666465383266376133356265643531383363 Feb 12 20:25:33.944000 audit: BPF prog-id=168 op=UNLOAD Feb 12 20:25:33.944000 audit: BPF prog-id=167 op=UNLOAD Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { perfmon } for pid=4141 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit[4141]: AVC avc: denied { bpf } for pid=4141 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:33.944000 audit: BPF prog-id=169 op=LOAD Feb 12 20:25:33.944000 audit[4141]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002213e8 items=0 ppid=4131 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:33.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266396666353165636464666465383266376133356265643531383363 Feb 12 20:25:33.945224 systemd-resolved[1063]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 12 20:25:33.955674 env[1127]: time="2024-02-12T20:25:33.955619309Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-vxhnl,Uid:4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe,Namespace:calico-system,Attempt:1,} returns sandbox id \"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c\"" Feb 12 20:25:35.080383 systemd-networkd[1018]: calic7cd9b67f1f: Gained IPv6LL Feb 12 20:25:35.221808 kernel: kauditd_printk_skb: 392 callbacks suppressed Feb 12 20:25:35.221944 kernel: audit: type=1130 audit(1707769535.216:1327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.74:22-10.0.0.1:58354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:35.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.74:22-10.0.0.1:58354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:35.216989 systemd[1]: Started sshd@11-10.0.0.74:22-10.0.0.1:58354.service. Feb 12 20:25:35.265000 audit[4170]: USER_ACCT pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.265687 sshd[4170]: Accepted publickey for core from 10.0.0.1 port 58354 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:35.268000 audit[4170]: CRED_ACQ pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.269626 sshd[4170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:35.272334 kernel: audit: type=1101 audit(1707769535.265:1328): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.272404 kernel: audit: type=1103 audit(1707769535.268:1329): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.272423 kernel: audit: type=1006 audit(1707769535.268:1330): pid=4170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Feb 12 20:25:35.274132 systemd[1]: Started session-12.scope. Feb 12 20:25:35.274378 kernel: audit: type=1300 audit(1707769535.268:1330): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff93581c00 a2=3 a3=0 items=0 ppid=1 pid=4170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.268000 audit[4170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff93581c00 a2=3 a3=0 items=0 ppid=1 pid=4170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.274589 systemd-logind[1109]: New session 12 of user core. Feb 12 20:25:35.268000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:35.280336 kernel: audit: type=1327 audit(1707769535.268:1330): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:35.280380 kernel: audit: type=1105 audit(1707769535.278:1331): pid=4170 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.278000 audit[4170]: USER_START pid=4170 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.280000 audit[4172]: CRED_ACQ pid=4172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.285666 kernel: audit: type=1103 audit(1707769535.280:1332): pid=4172 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.382249 sshd[4170]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:35.386375 kernel: audit: type=1106 audit(1707769535.382:1333): pid=4170 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.382000 audit[4170]: USER_END pid=4170 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.386248 systemd[1]: Started sshd@12-10.0.0.74:22-10.0.0.1:58362.service. Feb 12 20:25:35.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.74:22-10.0.0.1:58362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:35.389000 audit[4170]: CRED_DISP pid=4170 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.390775 kernel: audit: type=1130 audit(1707769535.386:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.74:22-10.0.0.1:58362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:35.391152 systemd[1]: sshd@11-10.0.0.74:22-10.0.0.1:58354.service: Deactivated successfully. Feb 12 20:25:35.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.74:22-10.0.0.1:58354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:35.392068 systemd[1]: session-12.scope: Deactivated successfully. Feb 12 20:25:35.393212 systemd-logind[1109]: Session 12 logged out. Waiting for processes to exit. Feb 12 20:25:35.395642 systemd-logind[1109]: Removed session 12. Feb 12 20:25:35.422000 audit[4183]: USER_ACCT pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.422827 sshd[4183]: Accepted publickey for core from 10.0.0.1 port 58362 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:35.423000 audit[4183]: CRED_ACQ pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.424000 audit[4183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b4faa90 a2=3 a3=0 items=0 ppid=1 pid=4183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.424000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:35.424587 sshd[4183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:35.428396 systemd-logind[1109]: New session 13 of user core. Feb 12 20:25:35.429398 systemd[1]: Started session-13.scope. Feb 12 20:25:35.434000 audit[4183]: USER_START pid=4183 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.435000 audit[4186]: CRED_ACQ pid=4186 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:35.584182 env[1127]: time="2024-02-12T20:25:35.584127813Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:35.586160 env[1127]: time="2024-02-12T20:25:35.586126657Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:35.587927 env[1127]: time="2024-02-12T20:25:35.587900749Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:35.590489 env[1127]: time="2024-02-12T20:25:35.590467619Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:35.591058 env[1127]: time="2024-02-12T20:25:35.591023873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:4e87edec0297dadd6f3bb25b2f540fd40e2abed9fff582c97ff4cd751d3f9803\"" Feb 12 20:25:35.592966 env[1127]: time="2024-02-12T20:25:35.592362477Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 12 20:25:35.604423 env[1127]: time="2024-02-12T20:25:35.604374475Z" level=info msg="CreateContainer within sandbox \"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 12 20:25:35.754685 env[1127]: time="2024-02-12T20:25:35.754576958Z" level=info msg="CreateContainer within sandbox \"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"1d6f4bd2f1f23c1e0ad21d6d89e8f64bcea1890f8e12787de8896fb883aa3ea5\"" Feb 12 20:25:35.755711 env[1127]: time="2024-02-12T20:25:35.755691901Z" level=info msg="StartContainer for \"1d6f4bd2f1f23c1e0ad21d6d89e8f64bcea1890f8e12787de8896fb883aa3ea5\"" Feb 12 20:25:35.777646 systemd[1]: Started cri-containerd-1d6f4bd2f1f23c1e0ad21d6d89e8f64bcea1890f8e12787de8896fb883aa3ea5.scope. Feb 12 20:25:35.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit: BPF prog-id=170 op=LOAD Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3565 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164366634626432663166323363316530616432316436643839653866 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3565 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164366634626432663166323363316530616432316436643839653866 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit: BPF prog-id=171 op=LOAD Feb 12 20:25:35.787000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028a390 items=0 ppid=3565 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164366634626432663166323363316530616432316436643839653866 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.787000 audit: BPF prog-id=172 op=LOAD Feb 12 20:25:35.787000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028a3d8 items=0 ppid=3565 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164366634626432663166323363316530616432316436643839653866 Feb 12 20:25:35.787000 audit: BPF prog-id=172 op=UNLOAD Feb 12 20:25:35.788000 audit: BPF prog-id=171 op=UNLOAD Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:35.788000 audit: BPF prog-id=173 op=LOAD Feb 12 20:25:35.788000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028a7e8 items=0 ppid=3565 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:35.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164366634626432663166323363316530616432316436643839653866 Feb 12 20:25:35.864933 env[1127]: time="2024-02-12T20:25:35.864879484Z" level=info msg="StartContainer for \"1d6f4bd2f1f23c1e0ad21d6d89e8f64bcea1890f8e12787de8896fb883aa3ea5\" returns successfully" Feb 12 20:25:36.062538 kubelet[2037]: I0212 20:25:36.062350 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7669f565dc-rm2gc" podStartSLOduration=-9.223371999792522e+09 pod.CreationTimestamp="2024-02-12 20:24:59 +0000 UTC" firstStartedPulling="2024-02-12 20:25:29.423371579 +0000 UTC m=+49.691510054" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:36.016644669 +0000 UTC m=+56.284783144" watchObservedRunningTime="2024-02-12 20:25:36.062253471 +0000 UTC m=+56.330391956" Feb 12 20:25:36.384825 sshd[4183]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:36.386161 systemd[1]: Started sshd@13-10.0.0.74:22-10.0.0.1:58368.service. Feb 12 20:25:36.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.74:22-10.0.0.1:58368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:36.387000 audit[4183]: USER_END pid=4183 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.387000 audit[4183]: CRED_DISP pid=4183 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.395084 systemd[1]: sshd@12-10.0.0.74:22-10.0.0.1:58362.service: Deactivated successfully. Feb 12 20:25:36.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.74:22-10.0.0.1:58362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:36.396926 systemd[1]: session-13.scope: Deactivated successfully. Feb 12 20:25:36.397668 systemd-logind[1109]: Session 13 logged out. Waiting for processes to exit. Feb 12 20:25:36.399755 systemd-logind[1109]: Removed session 13. Feb 12 20:25:36.430000 audit[4255]: USER_ACCT pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.431047 sshd[4255]: Accepted publickey for core from 10.0.0.1 port 58368 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:36.431000 audit[4255]: CRED_ACQ pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.431000 audit[4255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd0556d30 a2=3 a3=0 items=0 ppid=1 pid=4255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:36.431000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:36.432271 sshd[4255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:36.435697 systemd-logind[1109]: New session 14 of user core. Feb 12 20:25:36.436691 systemd[1]: Started session-14.scope. Feb 12 20:25:36.439000 audit[4255]: USER_START pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.440000 audit[4258]: CRED_ACQ pid=4258 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.466000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:36.466000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:36.466000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0008bb180 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:36.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:36.466000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013c64b0 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:36.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:36.538165 sshd[4255]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:36.538000 audit[4255]: USER_END pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.539000 audit[4255]: CRED_DISP pid=4255 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:36.540639 systemd[1]: sshd@13-10.0.0.74:22-10.0.0.1:58368.service: Deactivated successfully. Feb 12 20:25:36.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.74:22-10.0.0.1:58368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:36.541405 systemd[1]: session-14.scope: Deactivated successfully. Feb 12 20:25:36.542011 systemd-logind[1109]: Session 14 logged out. Waiting for processes to exit. Feb 12 20:25:36.542752 systemd-logind[1109]: Removed session 14. Feb 12 20:25:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c01536c840 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c015470930 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c013c0be00 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.004000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.004000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0152df7a0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.005000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.005000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01536c960 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.005000 audit[1889]: AVC avc: denied { watch } for pid=1889 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:37.005000 audit[1889]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0155ae4a0 a2=fc6 a3=0 items=0 ppid=1755 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c232,c426 key=(null) Feb 12 20:25:37.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3734002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 12 20:25:37.957076 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2637338656.mount: Deactivated successfully. Feb 12 20:25:38.805616 env[1127]: time="2024-02-12T20:25:38.805552047Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:38.807846 env[1127]: time="2024-02-12T20:25:38.807814565Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:38.809558 env[1127]: time="2024-02-12T20:25:38.809495601Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:38.811363 env[1127]: time="2024-02-12T20:25:38.811322522Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:38.812027 env[1127]: time="2024-02-12T20:25:38.811994012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:91c1c91da7602f16686c149419195b486669f3a1828fd320cf332fdc6a25297d\"" Feb 12 20:25:38.817467 env[1127]: time="2024-02-12T20:25:38.817398800Z" level=info msg="CreateContainer within sandbox \"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 12 20:25:38.830886 env[1127]: time="2024-02-12T20:25:38.830830548Z" level=info msg="CreateContainer within sandbox \"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"61cbeed11a79604feb180c19d57a06e0a68508b68c144585e920483ada2d39f9\"" Feb 12 20:25:38.831371 env[1127]: time="2024-02-12T20:25:38.831335977Z" level=info msg="StartContainer for \"61cbeed11a79604feb180c19d57a06e0a68508b68c144585e920483ada2d39f9\"" Feb 12 20:25:38.849562 systemd[1]: Started cri-containerd-61cbeed11a79604feb180c19d57a06e0a68508b68c144585e920483ada2d39f9.scope. Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fdc782941e8 items=0 ppid=4131 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631636265656431316137393630346665623138306331396435376130 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit: BPF prog-id=174 op=LOAD Feb 12 20:25:38.863000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00026dfc8 items=0 ppid=4131 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631636265656431316137393630346665623138306331396435376130 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit: BPF prog-id=175 op=LOAD Feb 12 20:25:38.863000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003bc018 items=0 ppid=4131 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631636265656431316137393630346665623138306331396435376130 Feb 12 20:25:38.863000 audit: BPF prog-id=175 op=UNLOAD Feb 12 20:25:38.863000 audit: BPF prog-id=174 op=UNLOAD Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { perfmon } for pid=4275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit[4275]: AVC avc: denied { bpf } for pid=4275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:38.863000 audit: BPF prog-id=176 op=LOAD Feb 12 20:25:38.863000 audit[4275]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003bc0a8 items=0 ppid=4131 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631636265656431316137393630346665623138306331396435376130 Feb 12 20:25:38.874312 env[1127]: time="2024-02-12T20:25:38.874261510Z" level=info msg="StartContainer for \"61cbeed11a79604feb180c19d57a06e0a68508b68c144585e920483ada2d39f9\" returns successfully" Feb 12 20:25:38.876174 env[1127]: time="2024-02-12T20:25:38.875470790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 12 20:25:39.831420 env[1127]: time="2024-02-12T20:25:39.831379831Z" level=info msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.862 [WARNING][4326] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vxhnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe", ResourceVersion:"839", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7c77f88967", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c", Pod:"csi-node-driver-vxhnl", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic7cd9b67f1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.862 [INFO][4326] k8s.go 578: Cleaning up netns ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.862 [INFO][4326] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" iface="eth0" netns="" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.862 [INFO][4326] k8s.go 585: Releasing IP address(es) ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.862 [INFO][4326] utils.go 188: Calico CNI releasing IP address ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.888 [INFO][4334] ipam_plugin.go 415: Releasing address using handleID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.889 [INFO][4334] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.889 [INFO][4334] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.895 [WARNING][4334] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.895 [INFO][4334] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.896 [INFO][4334] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:39.898777 env[1127]: 2024-02-12 20:25:39.897 [INFO][4326] k8s.go 591: Teardown processing complete. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.899419 env[1127]: time="2024-02-12T20:25:39.899384813Z" level=info msg="TearDown network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" successfully" Feb 12 20:25:39.899470 env[1127]: time="2024-02-12T20:25:39.899418346Z" level=info msg="StopPodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" returns successfully" Feb 12 20:25:39.900020 env[1127]: time="2024-02-12T20:25:39.899987585Z" level=info msg="RemovePodSandbox for \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" Feb 12 20:25:39.900072 env[1127]: time="2024-02-12T20:25:39.900014826Z" level=info msg="Forcibly stopping sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\"" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.930 [WARNING][4359] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--vxhnl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"4b7a4a7e-41aa-43c0-9c7c-4a6375cb76fe", ResourceVersion:"839", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7c77f88967", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c", Pod:"csi-node-driver-vxhnl", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calic7cd9b67f1f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.930 [INFO][4359] k8s.go 578: Cleaning up netns ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.930 [INFO][4359] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" iface="eth0" netns="" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.930 [INFO][4359] k8s.go 585: Releasing IP address(es) ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.930 [INFO][4359] utils.go 188: Calico CNI releasing IP address ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.950 [INFO][4366] ipam_plugin.go 415: Releasing address using handleID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.950 [INFO][4366] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.950 [INFO][4366] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.958 [WARNING][4366] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.958 [INFO][4366] ipam_plugin.go 443: Releasing address using workloadID ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" HandleID="k8s-pod-network.bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Workload="localhost-k8s-csi--node--driver--vxhnl-eth0" Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.960 [INFO][4366] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:39.963411 env[1127]: 2024-02-12 20:25:39.962 [INFO][4359] k8s.go 591: Teardown processing complete. ContainerID="bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa" Feb 12 20:25:39.963906 env[1127]: time="2024-02-12T20:25:39.963438077Z" level=info msg="TearDown network for sandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" successfully" Feb 12 20:25:40.014122 env[1127]: time="2024-02-12T20:25:40.014066805Z" level=info msg="RemovePodSandbox \"bf21ec2df97847f7a453b7ad19e1abb74906e9d4ccedb54680b803f1e3d1bcaa\" returns successfully" Feb 12 20:25:40.014547 env[1127]: time="2024-02-12T20:25:40.014478478Z" level=info msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.044 [WARNING][4391] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--tmpb5-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"4104abc2-c488-4bc1-a792-4cacc8be7337", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7", Pod:"coredns-787d4945fb-tmpb5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19ed5280755", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.044 [INFO][4391] k8s.go 578: Cleaning up netns ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.044 [INFO][4391] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" iface="eth0" netns="" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.044 [INFO][4391] k8s.go 585: Releasing IP address(es) ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.044 [INFO][4391] utils.go 188: Calico CNI releasing IP address ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.059 [INFO][4399] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.059 [INFO][4399] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.060 [INFO][4399] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.066 [WARNING][4399] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.066 [INFO][4399] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.067 [INFO][4399] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.070531 env[1127]: 2024-02-12 20:25:40.069 [INFO][4391] k8s.go 591: Teardown processing complete. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.071016 env[1127]: time="2024-02-12T20:25:40.070542115Z" level=info msg="TearDown network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" successfully" Feb 12 20:25:40.071016 env[1127]: time="2024-02-12T20:25:40.070570568Z" level=info msg="StopPodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" returns successfully" Feb 12 20:25:40.071061 env[1127]: time="2024-02-12T20:25:40.071029450Z" level=info msg="RemovePodSandbox for \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" Feb 12 20:25:40.071101 env[1127]: time="2024-02-12T20:25:40.071064886Z" level=info msg="Forcibly stopping sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\"" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.101 [WARNING][4422] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--tmpb5-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"4104abc2-c488-4bc1-a792-4cacc8be7337", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ffacf703679f5ddea4f79776610973e1c1d5eda243771d7aad021675e4a928f7", Pod:"coredns-787d4945fb-tmpb5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali19ed5280755", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.101 [INFO][4422] k8s.go 578: Cleaning up netns ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.101 [INFO][4422] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" iface="eth0" netns="" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.101 [INFO][4422] k8s.go 585: Releasing IP address(es) ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.101 [INFO][4422] utils.go 188: Calico CNI releasing IP address ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.117 [INFO][4429] ipam_plugin.go 415: Releasing address using handleID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.117 [INFO][4429] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.117 [INFO][4429] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.124 [WARNING][4429] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.124 [INFO][4429] ipam_plugin.go 443: Releasing address using workloadID ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" HandleID="k8s-pod-network.b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Workload="localhost-k8s-coredns--787d4945fb--tmpb5-eth0" Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.125 [INFO][4429] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.128555 env[1127]: 2024-02-12 20:25:40.127 [INFO][4422] k8s.go 591: Teardown processing complete. ContainerID="b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12" Feb 12 20:25:40.128555 env[1127]: time="2024-02-12T20:25:40.128501993Z" level=info msg="TearDown network for sandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" successfully" Feb 12 20:25:40.131883 env[1127]: time="2024-02-12T20:25:40.131854837Z" level=info msg="RemovePodSandbox \"b1213520ce1632d6b4449abd86dfd52c0a5cc1e0eca9b195a0efe2690f8deb12\" returns successfully" Feb 12 20:25:40.132408 env[1127]: time="2024-02-12T20:25:40.132362751Z" level=info msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.161 [WARNING][4453] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--f9qss-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dcc4e108-901b-4012-a257-ebae499de2e2", ResourceVersion:"808", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99", Pod:"coredns-787d4945fb-f9qss", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic755827b7a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.161 [INFO][4453] k8s.go 578: Cleaning up netns ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.161 [INFO][4453] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" iface="eth0" netns="" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.161 [INFO][4453] k8s.go 585: Releasing IP address(es) ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.161 [INFO][4453] utils.go 188: Calico CNI releasing IP address ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.176 [INFO][4462] ipam_plugin.go 415: Releasing address using handleID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.176 [INFO][4462] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.176 [INFO][4462] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.183 [WARNING][4462] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.183 [INFO][4462] ipam_plugin.go 443: Releasing address using workloadID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.184 [INFO][4462] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.187622 env[1127]: 2024-02-12 20:25:40.186 [INFO][4453] k8s.go 591: Teardown processing complete. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.188108 env[1127]: time="2024-02-12T20:25:40.187652816Z" level=info msg="TearDown network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" successfully" Feb 12 20:25:40.188108 env[1127]: time="2024-02-12T20:25:40.187700976Z" level=info msg="StopPodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" returns successfully" Feb 12 20:25:40.188220 env[1127]: time="2024-02-12T20:25:40.188174445Z" level=info msg="RemovePodSandbox for \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" Feb 12 20:25:40.188220 env[1127]: time="2024-02-12T20:25:40.188210332Z" level=info msg="Forcibly stopping sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\"" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.219 [WARNING][4486] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--787d4945fb--f9qss-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"dcc4e108-901b-4012-a257-ebae499de2e2", ResourceVersion:"808", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"71ebf411714661bb67092e26083f35c671288843a9137ef7571958da407afd99", Pod:"coredns-787d4945fb-f9qss", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic755827b7a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.219 [INFO][4486] k8s.go 578: Cleaning up netns ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.219 [INFO][4486] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" iface="eth0" netns="" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.219 [INFO][4486] k8s.go 585: Releasing IP address(es) ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.219 [INFO][4486] utils.go 188: Calico CNI releasing IP address ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.235 [INFO][4493] ipam_plugin.go 415: Releasing address using handleID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.235 [INFO][4493] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.235 [INFO][4493] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.241 [WARNING][4493] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.241 [INFO][4493] ipam_plugin.go 443: Releasing address using workloadID ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" HandleID="k8s-pod-network.da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Workload="localhost-k8s-coredns--787d4945fb--f9qss-eth0" Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.243 [INFO][4493] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.245980 env[1127]: 2024-02-12 20:25:40.244 [INFO][4486] k8s.go 591: Teardown processing complete. ContainerID="da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09" Feb 12 20:25:40.246508 env[1127]: time="2024-02-12T20:25:40.246479931Z" level=info msg="TearDown network for sandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" successfully" Feb 12 20:25:40.250777 env[1127]: time="2024-02-12T20:25:40.250745710Z" level=info msg="RemovePodSandbox \"da2a6e4163afef364fb4c8e10e49266ef882367426bc30015e1cc0f8ba1dad09\" returns successfully" Feb 12 20:25:40.251261 env[1127]: time="2024-02-12T20:25:40.251239316Z" level=info msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.280 [WARNING][4516] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0", GenerateName:"calico-kube-controllers-7669f565dc-", Namespace:"calico-system", SelfLink:"", UID:"e24ae84b-46ad-43ad-bb0e-01eadb1496b1", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f565dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1", Pod:"calico-kube-controllers-7669f565dc-rm2gc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic1491c614c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.280 [INFO][4516] k8s.go 578: Cleaning up netns ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.280 [INFO][4516] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" iface="eth0" netns="" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.280 [INFO][4516] k8s.go 585: Releasing IP address(es) ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.280 [INFO][4516] utils.go 188: Calico CNI releasing IP address ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.294 [INFO][4524] ipam_plugin.go 415: Releasing address using handleID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.295 [INFO][4524] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.295 [INFO][4524] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.301 [WARNING][4524] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.301 [INFO][4524] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.302 [INFO][4524] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.305231 env[1127]: 2024-02-12 20:25:40.303 [INFO][4516] k8s.go 591: Teardown processing complete. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.305790 env[1127]: time="2024-02-12T20:25:40.305313389Z" level=info msg="TearDown network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" successfully" Feb 12 20:25:40.305790 env[1127]: time="2024-02-12T20:25:40.305395222Z" level=info msg="StopPodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" returns successfully" Feb 12 20:25:40.305921 env[1127]: time="2024-02-12T20:25:40.305880143Z" level=info msg="RemovePodSandbox for \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" Feb 12 20:25:40.305959 env[1127]: time="2024-02-12T20:25:40.305922883Z" level=info msg="Forcibly stopping sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\"" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.334 [WARNING][4550] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0", GenerateName:"calico-kube-controllers-7669f565dc-", Namespace:"calico-system", SelfLink:"", UID:"e24ae84b-46ad-43ad-bb0e-01eadb1496b1", ResourceVersion:"864", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7669f565dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee7a0beca8d3794742efc7f23c9a21b7d040dbaadb7ff130974d47fee476beb1", Pod:"calico-kube-controllers-7669f565dc-rm2gc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic1491c614c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.335 [INFO][4550] k8s.go 578: Cleaning up netns ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.335 [INFO][4550] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" iface="eth0" netns="" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.335 [INFO][4550] k8s.go 585: Releasing IP address(es) ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.335 [INFO][4550] utils.go 188: Calico CNI releasing IP address ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.350 [INFO][4558] ipam_plugin.go 415: Releasing address using handleID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.350 [INFO][4558] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.350 [INFO][4558] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.357 [WARNING][4558] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.357 [INFO][4558] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" HandleID="k8s-pod-network.c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Workload="localhost-k8s-calico--kube--controllers--7669f565dc--rm2gc-eth0" Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.358 [INFO][4558] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:25:40.361036 env[1127]: 2024-02-12 20:25:40.359 [INFO][4550] k8s.go 591: Teardown processing complete. ContainerID="c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805" Feb 12 20:25:40.361712 env[1127]: time="2024-02-12T20:25:40.361076863Z" level=info msg="TearDown network for sandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" successfully" Feb 12 20:25:40.364250 env[1127]: time="2024-02-12T20:25:40.364215115Z" level=info msg="RemovePodSandbox \"c9df9ef0500687ff04ddc854efb496c7c159456eca3f8d7896bc22a8166cd805\" returns successfully" Feb 12 20:25:40.878077 env[1127]: time="2024-02-12T20:25:40.878023076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:40.880424 env[1127]: time="2024-02-12T20:25:40.880241365Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:40.881962 env[1127]: time="2024-02-12T20:25:40.881935267Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:40.883597 env[1127]: time="2024-02-12T20:25:40.883572602Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:40.883978 env[1127]: time="2024-02-12T20:25:40.883934834Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:d36ef67f7b24c4facd86d0bc06b0cd907431a822dee695eb06b86a905bff85d4\"" Feb 12 20:25:40.885290 env[1127]: time="2024-02-12T20:25:40.885255963Z" level=info msg="CreateContainer within sandbox \"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 12 20:25:40.895787 env[1127]: time="2024-02-12T20:25:40.895733545Z" level=info msg="CreateContainer within sandbox \"2f9ff51ecddfde82f7a35bed5183c51538bcec237222a5fc7726ab5da00c265c\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"50b9926b711fa69b783399dbdabed9c3aa0a141c3fd881a5d05b326a75a36ef5\"" Feb 12 20:25:40.896139 env[1127]: time="2024-02-12T20:25:40.896119833Z" level=info msg="StartContainer for \"50b9926b711fa69b783399dbdabed9c3aa0a141c3fd881a5d05b326a75a36ef5\"" Feb 12 20:25:40.912014 systemd[1]: Started cri-containerd-50b9926b711fa69b783399dbdabed9c3aa0a141c3fd881a5d05b326a75a36ef5.scope. Feb 12 20:25:40.922000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.925351 kernel: kauditd_printk_skb: 147 callbacks suppressed Feb 12 20:25:40.925404 kernel: audit: type=1400 audit(1707769540.922:1386): avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.925427 kernel: audit: type=1300 audit(1707769540.922:1386): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f870a6bdc68 items=0 ppid=4131 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:40.922000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f870a6bdc68 items=0 ppid=4131 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:40.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530623939323662373131666136396237383333393964626461626564 Feb 12 20:25:40.932004 kernel: audit: type=1327 audit(1707769540.922:1386): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530623939323662373131666136396237383333393964626461626564 Feb 12 20:25:40.932046 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.936603 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.936637 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.941293 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.943553 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.946020 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.948485 kernel: audit: type=1400 audit(1707769540.926:1387): avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.926000 audit: BPF prog-id=177 op=LOAD Feb 12 20:25:40.926000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000098408 items=0 ppid=4131 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:40.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530623939323662373131666136396237383333393964626461626564 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.931000 audit: BPF prog-id=178 op=LOAD Feb 12 20:25:40.931000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000098458 items=0 ppid=4131 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:40.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530623939323662373131666136396237383333393964626461626564 Feb 12 20:25:40.934000 audit: BPF prog-id=178 op=UNLOAD Feb 12 20:25:40.934000 audit: BPF prog-id=177 op=UNLOAD Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:40.934000 audit: BPF prog-id=179 op=LOAD Feb 12 20:25:40.934000 audit[4573]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000984e8 items=0 ppid=4131 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:40.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530623939323662373131666136396237383333393964626461626564 Feb 12 20:25:40.958417 env[1127]: time="2024-02-12T20:25:40.958372826Z" level=info msg="StartContainer for \"50b9926b711fa69b783399dbdabed9c3aa0a141c3fd881a5d05b326a75a36ef5\" returns successfully" Feb 12 20:25:41.020763 kubelet[2037]: I0212 20:25:41.020721 2037 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-vxhnl" podStartSLOduration=-9.223371994834087e+09 pod.CreationTimestamp="2024-02-12 20:24:59 +0000 UTC" firstStartedPulling="2024-02-12 20:25:33.95690285 +0000 UTC m=+54.225041325" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:25:41.019694775 +0000 UTC m=+61.287833280" watchObservedRunningTime="2024-02-12 20:25:41.020688931 +0000 UTC m=+61.288827406" Feb 12 20:25:41.092577 kubelet[2037]: E0212 20:25:41.092550 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:41.543334 systemd[1]: Started sshd@14-10.0.0.74:22-10.0.0.1:58382.service. Feb 12 20:25:41.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.74:22-10.0.0.1:58382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:41.582000 audit[4627]: USER_ACCT pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.582883 sshd[4627]: Accepted publickey for core from 10.0.0.1 port 58382 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:41.583000 audit[4627]: CRED_ACQ pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.583000 audit[4627]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffad4dd250 a2=3 a3=0 items=0 ppid=1 pid=4627 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:41.583000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:41.584135 sshd[4627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:41.587863 systemd-logind[1109]: New session 15 of user core. Feb 12 20:25:41.588751 systemd[1]: Started session-15.scope. Feb 12 20:25:41.591000 audit[4627]: USER_START pid=4627 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.593000 audit[4629]: CRED_ACQ pid=4629 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.702335 sshd[4627]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:41.701000 audit[4627]: USER_END pid=4627 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.701000 audit[4627]: CRED_DISP pid=4627 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:41.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.74:22-10.0.0.1:58382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:41.704202 systemd[1]: sshd@14-10.0.0.74:22-10.0.0.1:58382.service: Deactivated successfully. Feb 12 20:25:41.704922 systemd[1]: session-15.scope: Deactivated successfully. Feb 12 20:25:41.705444 systemd-logind[1109]: Session 15 logged out. Waiting for processes to exit. Feb 12 20:25:41.706056 systemd-logind[1109]: Removed session 15. Feb 12 20:25:41.909224 kubelet[2037]: I0212 20:25:41.909116 2037 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 12 20:25:41.909523 kubelet[2037]: I0212 20:25:41.909498 2037 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 12 20:25:46.706893 systemd[1]: Started sshd@15-10.0.0.74:22-10.0.0.1:46354.service. Feb 12 20:25:46.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.74:22-10.0.0.1:46354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:46.707709 kernel: kauditd_printk_skb: 44 callbacks suppressed Feb 12 20:25:46.707749 kernel: audit: type=1130 audit(1707769546.705:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.74:22-10.0.0.1:46354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:46.748000 audit[4646]: USER_ACCT pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.749516 sshd[4646]: Accepted publickey for core from 10.0.0.1 port 46354 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:46.751000 audit[4646]: CRED_ACQ pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.752487 sshd[4646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:46.754971 kernel: audit: type=1101 audit(1707769546.748:1402): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.755103 kernel: audit: type=1103 audit(1707769546.751:1403): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.755831 systemd-logind[1109]: New session 16 of user core. Feb 12 20:25:46.756563 systemd[1]: Started session-16.scope. Feb 12 20:25:46.757398 kernel: audit: type=1006 audit(1707769546.751:1404): pid=4646 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 12 20:25:46.751000 audit[4646]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5beba030 a2=3 a3=0 items=0 ppid=1 pid=4646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:46.760290 kernel: audit: type=1300 audit(1707769546.751:1404): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5beba030 a2=3 a3=0 items=0 ppid=1 pid=4646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:46.751000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:46.764711 kernel: audit: type=1327 audit(1707769546.751:1404): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:46.764758 kernel: audit: type=1105 audit(1707769546.759:1405): pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.759000 audit[4646]: USER_START pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.767284 kernel: audit: type=1103 audit(1707769546.760:1406): pid=4655 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.760000 audit[4655]: CRED_ACQ pid=4655 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.864075 sshd[4646]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:46.863000 audit[4646]: USER_END pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.866299 systemd[1]: sshd@15-10.0.0.74:22-10.0.0.1:46354.service: Deactivated successfully. Feb 12 20:25:46.866976 systemd[1]: session-16.scope: Deactivated successfully. Feb 12 20:25:46.867514 systemd-logind[1109]: Session 16 logged out. Waiting for processes to exit. Feb 12 20:25:46.863000 audit[4646]: CRED_DISP pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.868157 systemd-logind[1109]: Removed session 16. Feb 12 20:25:46.870660 kernel: audit: type=1106 audit(1707769546.863:1407): pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.870721 kernel: audit: type=1104 audit(1707769546.863:1408): pid=4646 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:46.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.74:22-10.0.0.1:46354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:51.869565 systemd[1]: Started sshd@16-10.0.0.74:22-10.0.0.1:46370.service. Feb 12 20:25:51.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.74:22-10.0.0.1:46370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:51.871429 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:25:51.871497 kernel: audit: type=1130 audit(1707769551.868:1410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.74:22-10.0.0.1:46370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:51.906000 audit[4706]: USER_ACCT pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.908394 sshd[4706]: Accepted publickey for core from 10.0.0.1 port 46370 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:51.910558 sshd[4706]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:51.908000 audit[4706]: CRED_ACQ pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.913767 systemd-logind[1109]: New session 17 of user core. Feb 12 20:25:51.914518 systemd[1]: Started session-17.scope. Feb 12 20:25:51.920261 kernel: audit: type=1101 audit(1707769551.906:1411): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.920347 kernel: audit: type=1103 audit(1707769551.908:1412): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.920370 kernel: audit: type=1006 audit(1707769551.909:1413): pid=4706 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 12 20:25:51.909000 audit[4706]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd17b66220 a2=3 a3=0 items=0 ppid=1 pid=4706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:51.925300 kernel: audit: type=1300 audit(1707769551.909:1413): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd17b66220 a2=3 a3=0 items=0 ppid=1 pid=4706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:51.925355 kernel: audit: type=1327 audit(1707769551.909:1413): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:51.909000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:51.917000 audit[4706]: USER_START pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.929995 kernel: audit: type=1105 audit(1707769551.917:1414): pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.930038 kernel: audit: type=1103 audit(1707769551.918:1415): pid=4708 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:51.918000 audit[4708]: CRED_ACQ pid=4708 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:52.024089 sshd[4706]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:52.023000 audit[4706]: USER_END pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:52.025949 systemd[1]: sshd@16-10.0.0.74:22-10.0.0.1:46370.service: Deactivated successfully. Feb 12 20:25:52.026601 systemd[1]: session-17.scope: Deactivated successfully. Feb 12 20:25:52.027767 systemd-logind[1109]: Session 17 logged out. Waiting for processes to exit. Feb 12 20:25:52.028320 systemd-logind[1109]: Removed session 17. Feb 12 20:25:52.023000 audit[4706]: CRED_DISP pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:52.038875 kernel: audit: type=1106 audit(1707769552.023:1416): pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:52.038933 kernel: audit: type=1104 audit(1707769552.023:1417): pid=4706 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:52.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.74:22-10.0.0.1:46370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:52.943000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:52.943000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0002e2840 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:52.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:52.944000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:52.944000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0002e2860 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:52.944000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:52.944000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000bf6380 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:52.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:52.945000 audit[1929]: AVC avc: denied { watch } for pid=1929 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:52.945000 audit[1929]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0002e2880 a2=fc6 a3=0 items=0 ppid=1783 pid=1929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c936,c999 key=(null) Feb 12 20:25:52.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:57.028396 systemd[1]: Started sshd@17-10.0.0.74:22-10.0.0.1:40184.service. Feb 12 20:25:57.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.74:22-10.0.0.1:40184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.029635 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 12 20:25:57.029758 kernel: audit: type=1130 audit(1707769557.028:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.74:22-10.0.0.1:40184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.068000 audit[4723]: USER_ACCT pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.069111 sshd[4723]: Accepted publickey for core from 10.0.0.1 port 40184 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:57.071000 audit[4723]: CRED_ACQ pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.072165 sshd[4723]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:57.075141 systemd-logind[1109]: New session 18 of user core. Feb 12 20:25:57.075855 systemd[1]: Started session-18.scope. Feb 12 20:25:57.091797 kernel: audit: type=1101 audit(1707769557.068:1424): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.091885 kernel: audit: type=1103 audit(1707769557.071:1425): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.091924 kernel: audit: type=1006 audit(1707769557.071:1426): pid=4723 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Feb 12 20:25:57.071000 audit[4723]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff95075eb0 a2=3 a3=0 items=0 ppid=1 pid=4723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:57.096366 kernel: audit: type=1300 audit(1707769557.071:1426): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff95075eb0 a2=3 a3=0 items=0 ppid=1 pid=4723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:57.096399 kernel: audit: type=1327 audit(1707769557.071:1426): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:57.071000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:57.079000 audit[4723]: USER_START pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.118095 kernel: audit: type=1105 audit(1707769557.079:1427): pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.118150 kernel: audit: type=1103 audit(1707769557.080:1428): pid=4725 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.080000 audit[4725]: CRED_ACQ pid=4725 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.196205 sshd[4723]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:57.196000 audit[4723]: USER_END pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.199499 systemd[1]: sshd@17-10.0.0.74:22-10.0.0.1:40184.service: Deactivated successfully. Feb 12 20:25:57.200004 systemd[1]: session-18.scope: Deactivated successfully. Feb 12 20:25:57.197000 audit[4723]: CRED_DISP pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.201376 systemd[1]: Started sshd@18-10.0.0.74:22-10.0.0.1:40198.service. Feb 12 20:25:57.203760 kernel: audit: type=1106 audit(1707769557.196:1429): pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.203829 kernel: audit: type=1104 audit(1707769557.197:1430): pid=4723 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.74:22-10.0.0.1:40184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.74:22-10.0.0.1:40198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.205449 systemd-logind[1109]: Session 18 logged out. Waiting for processes to exit. Feb 12 20:25:57.206173 systemd-logind[1109]: Removed session 18. Feb 12 20:25:57.238000 audit[4736]: USER_ACCT pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.239019 sshd[4736]: Accepted publickey for core from 10.0.0.1 port 40198 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:57.239000 audit[4736]: CRED_ACQ pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.239000 audit[4736]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd22dc0d40 a2=3 a3=0 items=0 ppid=1 pid=4736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:57.239000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:57.240014 sshd[4736]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:57.243255 systemd-logind[1109]: New session 19 of user core. Feb 12 20:25:57.244055 systemd[1]: Started session-19.scope. Feb 12 20:25:57.247000 audit[4736]: USER_START pid=4736 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.249000 audit[4738]: CRED_ACQ pid=4738 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.815487 sshd[4736]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:57.816000 audit[4736]: USER_END pid=4736 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.816000 audit[4736]: CRED_DISP pid=4736 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.818423 systemd[1]: sshd@18-10.0.0.74:22-10.0.0.1:40198.service: Deactivated successfully. Feb 12 20:25:57.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.74:22-10.0.0.1:40198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.819100 systemd[1]: session-19.scope: Deactivated successfully. Feb 12 20:25:57.819733 systemd-logind[1109]: Session 19 logged out. Waiting for processes to exit. Feb 12 20:25:57.820920 systemd[1]: Started sshd@19-10.0.0.74:22-10.0.0.1:40210.service. Feb 12 20:25:57.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.74:22-10.0.0.1:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:57.821815 systemd-logind[1109]: Removed session 19. Feb 12 20:25:57.858000 audit[4747]: USER_ACCT pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.858568 sshd[4747]: Accepted publickey for core from 10.0.0.1 port 40210 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:57.858000 audit[4747]: CRED_ACQ pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.858000 audit[4747]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb37525b0 a2=3 a3=0 items=0 ppid=1 pid=4747 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:57.858000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:57.859546 sshd[4747]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:57.863234 systemd-logind[1109]: New session 20 of user core. Feb 12 20:25:57.864261 systemd[1]: Started session-20.scope. Feb 12 20:25:57.867000 audit[4747]: USER_START pid=4747 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.868000 audit[4749]: CRED_ACQ pid=4749 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:57.879694 kubelet[2037]: E0212 20:25:57.879669 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:25:58.996000 audit[4786]: NETFILTER_CFG table=filter:122 family=2 entries=18 op=nft_register_rule pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:58.996000 audit[4786]: SYSCALL arch=c000003e syscall=46 success=yes exit=10364 a0=3 a1=7ffc48e6e2d0 a2=0 a3=7ffc48e6e2bc items=0 ppid=2223 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:58.996000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:58.998000 audit[4786]: NETFILTER_CFG table=nat:123 family=2 entries=78 op=nft_register_rule pid=4786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:58.998000 audit[4786]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffc48e6e2d0 a2=0 a3=7ffc48e6e2bc items=0 ppid=2223 pid=4786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:58.998000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:59.032000 audit[4812]: NETFILTER_CFG table=filter:124 family=2 entries=30 op=nft_register_rule pid=4812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:59.032000 audit[4812]: SYSCALL arch=c000003e syscall=46 success=yes exit=10364 a0=3 a1=7ffe59413fb0 a2=0 a3=7ffe59413f9c items=0 ppid=2223 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:59.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:59.034000 audit[4812]: NETFILTER_CFG table=nat:125 family=2 entries=78 op=nft_register_rule pid=4812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:59.034000 audit[4812]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffe59413fb0 a2=0 a3=7ffe59413f9c items=0 ppid=2223 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:59.034000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:59.137100 sshd[4747]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:59.137000 audit[4747]: USER_END pid=4747 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.137000 audit[4747]: CRED_DISP pid=4747 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.74:22-10.0.0.1:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.139397 systemd[1]: sshd@19-10.0.0.74:22-10.0.0.1:40210.service: Deactivated successfully. Feb 12 20:25:59.139857 systemd[1]: session-20.scope: Deactivated successfully. Feb 12 20:25:59.140285 systemd-logind[1109]: Session 20 logged out. Waiting for processes to exit. Feb 12 20:25:59.141058 systemd[1]: Started sshd@20-10.0.0.74:22-10.0.0.1:40212.service. Feb 12 20:25:59.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.74:22-10.0.0.1:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.141681 systemd-logind[1109]: Removed session 20. Feb 12 20:25:59.178000 audit[4815]: USER_ACCT pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.178679 sshd[4815]: Accepted publickey for core from 10.0.0.1 port 40212 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:59.179000 audit[4815]: CRED_ACQ pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.179000 audit[4815]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd23c9dee0 a2=3 a3=0 items=0 ppid=1 pid=4815 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:59.179000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:59.179747 sshd[4815]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:59.185326 systemd[1]: Started session-21.scope. Feb 12 20:25:59.185497 systemd-logind[1109]: New session 21 of user core. Feb 12 20:25:59.189000 audit[4815]: USER_START pid=4815 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.190000 audit[4817]: CRED_ACQ pid=4817 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.469119 sshd[4815]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:59.469000 audit[4815]: USER_END pid=4815 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.469000 audit[4815]: CRED_DISP pid=4815 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.472063 systemd[1]: sshd@20-10.0.0.74:22-10.0.0.1:40212.service: Deactivated successfully. Feb 12 20:25:59.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.74:22-10.0.0.1:40212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.472768 systemd[1]: session-21.scope: Deactivated successfully. Feb 12 20:25:59.473661 systemd-logind[1109]: Session 21 logged out. Waiting for processes to exit. Feb 12 20:25:59.474611 systemd[1]: Started sshd@21-10.0.0.74:22-10.0.0.1:40222.service. Feb 12 20:25:59.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.74:22-10.0.0.1:40222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.475444 systemd-logind[1109]: Removed session 21. Feb 12 20:25:59.512000 audit[4826]: USER_ACCT pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.512893 sshd[4826]: Accepted publickey for core from 10.0.0.1 port 40222 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:25:59.513000 audit[4826]: CRED_ACQ pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.513000 audit[4826]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7fc86190 a2=3 a3=0 items=0 ppid=1 pid=4826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:59.513000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:59.513978 sshd[4826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:59.517845 systemd-logind[1109]: New session 22 of user core. Feb 12 20:25:59.518771 systemd[1]: Started session-22.scope. Feb 12 20:25:59.522000 audit[4826]: USER_START pid=4826 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.523000 audit[4828]: CRED_ACQ pid=4828 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.628339 sshd[4826]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:59.628000 audit[4826]: USER_END pid=4826 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.629000 audit[4826]: CRED_DISP pid=4826 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:25:59.630392 systemd[1]: sshd@21-10.0.0.74:22-10.0.0.1:40222.service: Deactivated successfully. Feb 12 20:25:59.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.74:22-10.0.0.1:40222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.631122 systemd[1]: session-22.scope: Deactivated successfully. Feb 12 20:25:59.632052 systemd-logind[1109]: Session 22 logged out. Waiting for processes to exit. Feb 12 20:25:59.632772 systemd-logind[1109]: Removed session 22. Feb 12 20:26:00.879080 kubelet[2037]: E0212 20:26:00.879040 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:26:04.633448 systemd[1]: Started sshd@22-10.0.0.74:22-10.0.0.1:53716.service. Feb 12 20:26:04.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.74:22-10.0.0.1:53716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:04.646417 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 12 20:26:04.646484 kernel: audit: type=1130 audit(1707769564.632:1472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.74:22-10.0.0.1:53716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:04.674000 audit[4843]: USER_ACCT pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.675855 sshd[4843]: Accepted publickey for core from 10.0.0.1 port 53716 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:26:04.681000 audit[4843]: CRED_ACQ pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.683265 sshd[4843]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:26:04.685806 kernel: audit: type=1101 audit(1707769564.674:1473): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.685888 kernel: audit: type=1103 audit(1707769564.681:1474): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.685916 kernel: audit: type=1006 audit(1707769564.681:1475): pid=4843 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 12 20:26:04.687115 systemd-logind[1109]: New session 23 of user core. Feb 12 20:26:04.681000 audit[4843]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaba73320 a2=3 a3=0 items=0 ppid=1 pid=4843 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.687923 systemd[1]: Started session-23.scope. Feb 12 20:26:04.691686 kernel: audit: type=1300 audit(1707769564.681:1475): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaba73320 a2=3 a3=0 items=0 ppid=1 pid=4843 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.692024 kernel: audit: type=1327 audit(1707769564.681:1475): proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:04.681000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:04.691000 audit[4843]: USER_START pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.696109 kernel: audit: type=1105 audit(1707769564.691:1476): pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.696153 kernel: audit: type=1103 audit(1707769564.693:1477): pid=4845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.693000 audit[4845]: CRED_ACQ pid=4845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.792631 sshd[4843]: pam_unix(sshd:session): session closed for user core Feb 12 20:26:04.792000 audit[4843]: USER_END pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.794521 systemd[1]: sshd@22-10.0.0.74:22-10.0.0.1:53716.service: Deactivated successfully. Feb 12 20:26:04.795392 systemd[1]: session-23.scope: Deactivated successfully. Feb 12 20:26:04.796056 systemd-logind[1109]: Session 23 logged out. Waiting for processes to exit. Feb 12 20:26:04.796821 systemd-logind[1109]: Removed session 23. Feb 12 20:26:04.792000 audit[4843]: CRED_DISP pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.806830 kernel: audit: type=1106 audit(1707769564.792:1478): pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.806881 kernel: audit: type=1104 audit(1707769564.792:1479): pid=4843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:04.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.74:22-10.0.0.1:53716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:09.796678 systemd[1]: Started sshd@23-10.0.0.74:22-10.0.0.1:53732.service. Feb 12 20:26:09.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.74:22-10.0.0.1:53732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:09.797669 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:26:09.797732 kernel: audit: type=1130 audit(1707769569.795:1481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.74:22-10.0.0.1:53732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:09.831000 audit[4862]: USER_ACCT pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.833381 sshd[4862]: Accepted publickey for core from 10.0.0.1 port 53732 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:26:09.834000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.836186 sshd[4862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:26:09.838798 kernel: audit: type=1101 audit(1707769569.831:1482): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.838905 kernel: audit: type=1103 audit(1707769569.834:1483): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.838948 kernel: audit: type=1006 audit(1707769569.834:1484): pid=4862 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 12 20:26:09.839554 systemd-logind[1109]: New session 24 of user core. Feb 12 20:26:09.840254 systemd[1]: Started session-24.scope. Feb 12 20:26:09.834000 audit[4862]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd20bb4680 a2=3 a3=0 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:09.844444 kernel: audit: type=1300 audit(1707769569.834:1484): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd20bb4680 a2=3 a3=0 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:09.844493 kernel: audit: type=1327 audit(1707769569.834:1484): proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:09.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:09.843000 audit[4862]: USER_START pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.848710 kernel: audit: type=1105 audit(1707769569.843:1485): pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.848750 kernel: audit: type=1103 audit(1707769569.844:1486): pid=4864 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.844000 audit[4864]: CRED_ACQ pid=4864 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.974426 sshd[4862]: pam_unix(sshd:session): session closed for user core Feb 12 20:26:09.973000 audit[4862]: USER_END pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.976404 systemd[1]: sshd@23-10.0.0.74:22-10.0.0.1:53732.service: Deactivated successfully. Feb 12 20:26:09.977204 systemd[1]: session-24.scope: Deactivated successfully. Feb 12 20:26:09.977942 systemd-logind[1109]: Session 24 logged out. Waiting for processes to exit. Feb 12 20:26:09.974000 audit[4862]: CRED_DISP pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.978639 systemd-logind[1109]: Removed session 24. Feb 12 20:26:09.980377 kernel: audit: type=1106 audit(1707769569.973:1487): pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.980429 kernel: audit: type=1104 audit(1707769569.974:1488): pid=4862 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:09.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.74:22-10.0.0.1:53732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:10.181000 audit[4899]: NETFILTER_CFG table=filter:126 family=2 entries=18 op=nft_register_rule pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:10.181000 audit[4899]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffda88360f0 a2=0 a3=7ffda88360dc items=0 ppid=2223 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:10.181000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:10.185000 audit[4899]: NETFILTER_CFG table=nat:127 family=2 entries=162 op=nft_register_chain pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:10.185000 audit[4899]: SYSCALL arch=c000003e syscall=46 success=yes exit=66940 a0=3 a1=7ffda88360f0 a2=0 a3=7ffda88360dc items=0 ppid=2223 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:10.185000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:14.620624 kubelet[2037]: I0212 20:26:14.620562 2037 topology_manager.go:210] "Topology Admit Handler" Feb 12 20:26:14.630773 systemd[1]: Created slice kubepods-besteffort-poda029a21a_4db7_4e58_934c_d8fbf50ce184.slice. Feb 12 20:26:14.663000 audit[4951]: NETFILTER_CFG table=filter:128 family=2 entries=7 op=nft_register_rule pid=4951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:14.663000 audit[4951]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff14b0c5d0 a2=0 a3=7fff14b0c5bc items=0 ppid=2223 pid=4951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:14.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:14.666000 audit[4951]: NETFILTER_CFG table=nat:129 family=2 entries=198 op=nft_register_rule pid=4951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:14.666000 audit[4951]: SYSCALL arch=c000003e syscall=46 success=yes exit=66940 a0=3 a1=7fff14b0c5d0 a2=0 a3=7fff14b0c5bc items=0 ppid=2223 pid=4951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:14.666000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:14.701000 audit[4977]: NETFILTER_CFG table=filter:130 family=2 entries=8 op=nft_register_rule pid=4977 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:14.701000 audit[4977]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffdec8eb680 a2=0 a3=7ffdec8eb66c items=0 ppid=2223 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:14.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:14.704000 audit[4977]: NETFILTER_CFG table=nat:131 family=2 entries=198 op=nft_register_rule pid=4977 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:14.704000 audit[4977]: SYSCALL arch=c000003e syscall=46 success=yes exit=66940 a0=3 a1=7ffdec8eb680 a2=0 a3=7ffdec8eb66c items=0 ppid=2223 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:14.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:14.710603 kubelet[2037]: I0212 20:26:14.710571 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lf4vh\" (UniqueName: \"kubernetes.io/projected/a029a21a-4db7-4e58-934c-d8fbf50ce184-kube-api-access-lf4vh\") pod \"calico-apiserver-6d596df75f-75b85\" (UID: \"a029a21a-4db7-4e58-934c-d8fbf50ce184\") " pod="calico-apiserver/calico-apiserver-6d596df75f-75b85" Feb 12 20:26:14.710705 kubelet[2037]: I0212 20:26:14.710633 2037 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a029a21a-4db7-4e58-934c-d8fbf50ce184-calico-apiserver-certs\") pod \"calico-apiserver-6d596df75f-75b85\" (UID: \"a029a21a-4db7-4e58-934c-d8fbf50ce184\") " pod="calico-apiserver/calico-apiserver-6d596df75f-75b85" Feb 12 20:26:14.812213 kubelet[2037]: E0212 20:26:14.811808 2037 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Feb 12 20:26:14.812785 kubelet[2037]: E0212 20:26:14.812771 2037 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/a029a21a-4db7-4e58-934c-d8fbf50ce184-calico-apiserver-certs podName:a029a21a-4db7-4e58-934c-d8fbf50ce184 nodeName:}" failed. No retries permitted until 2024-02-12 20:26:15.312238284 +0000 UTC m=+95.580376759 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/a029a21a-4db7-4e58-934c-d8fbf50ce184-calico-apiserver-certs") pod "calico-apiserver-6d596df75f-75b85" (UID: "a029a21a-4db7-4e58-934c-d8fbf50ce184") : secret "calico-apiserver-certs" not found Feb 12 20:26:14.979237 systemd[1]: Started sshd@24-10.0.0.74:22-10.0.0.1:35006.service. Feb 12 20:26:14.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.74:22-10.0.0.1:35006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:14.982600 kernel: kauditd_printk_skb: 19 callbacks suppressed Feb 12 20:26:14.982642 kernel: audit: type=1130 audit(1707769574.978:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.74:22-10.0.0.1:35006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:15.013000 audit[4980]: USER_ACCT pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.015299 sshd[4980]: Accepted publickey for core from 10.0.0.1 port 35006 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:26:15.016000 audit[4980]: CRED_ACQ pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.018266 sshd[4980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:26:15.020364 kernel: audit: type=1101 audit(1707769575.013:1497): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.020412 kernel: audit: type=1103 audit(1707769575.016:1498): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.020431 kernel: audit: type=1006 audit(1707769575.016:1499): pid=4980 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Feb 12 20:26:15.021531 systemd-logind[1109]: New session 25 of user core. Feb 12 20:26:15.022014 kernel: audit: type=1300 audit(1707769575.016:1499): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2483c290 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.016000 audit[4980]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2483c290 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.022411 systemd[1]: Started session-25.scope. Feb 12 20:26:15.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:15.026644 kernel: audit: type=1327 audit(1707769575.016:1499): proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:15.025000 audit[4980]: USER_START pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.030329 kernel: audit: type=1105 audit(1707769575.025:1500): pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.030380 kernel: audit: type=1103 audit(1707769575.025:1501): pid=4982 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.025000 audit[4982]: CRED_ACQ pid=4982 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.123097 sshd[4980]: pam_unix(sshd:session): session closed for user core Feb 12 20:26:15.122000 audit[4980]: USER_END pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.124915 systemd[1]: sshd@24-10.0.0.74:22-10.0.0.1:35006.service: Deactivated successfully. Feb 12 20:26:15.125670 systemd[1]: session-25.scope: Deactivated successfully. Feb 12 20:26:15.126527 systemd-logind[1109]: Session 25 logged out. Waiting for processes to exit. Feb 12 20:26:15.122000 audit[4980]: CRED_DISP pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.127198 systemd-logind[1109]: Removed session 25. Feb 12 20:26:15.129321 kernel: audit: type=1106 audit(1707769575.122:1502): pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.129373 kernel: audit: type=1104 audit(1707769575.122:1503): pid=4980 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:15.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.74:22-10.0.0.1:35006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:15.535449 env[1127]: time="2024-02-12T20:26:15.535353023Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d596df75f-75b85,Uid:a029a21a-4db7-4e58-934c-d8fbf50ce184,Namespace:calico-apiserver,Attempt:0,}" Feb 12 20:26:15.669035 systemd-networkd[1018]: cali2bed058771e: Link UP Feb 12 20:26:15.671343 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:26:15.671399 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2bed058771e: link becomes ready Feb 12 20:26:15.671491 systemd-networkd[1018]: cali2bed058771e: Gained carrier Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.606 [INFO][4993] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0 calico-apiserver-6d596df75f- calico-apiserver a029a21a-4db7-4e58-934c-d8fbf50ce184 1116 0 2024-02-12 20:26:14 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6d596df75f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6d596df75f-75b85 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2bed058771e [] []}} ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.606 [INFO][4993] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.628 [INFO][5007] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" HandleID="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Workload="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.638 [INFO][5007] ipam_plugin.go 268: Auto assigning IP ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" HandleID="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Workload="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029f960), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6d596df75f-75b85", "timestamp":"2024-02-12 20:26:15.628094263 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.638 [INFO][5007] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.638 [INFO][5007] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.638 [INFO][5007] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.640 [INFO][5007] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.643 [INFO][5007] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.648 [INFO][5007] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.650 [INFO][5007] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.652 [INFO][5007] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.652 [INFO][5007] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.653 [INFO][5007] ipam.go 1682: Creating new handle: k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211 Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.657 [INFO][5007] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.661 [INFO][5007] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.662 [INFO][5007] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" host="localhost" Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.662 [INFO][5007] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:26:15.684854 env[1127]: 2024-02-12 20:26:15.662 [INFO][5007] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" HandleID="k8s-pod-network.a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Workload="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.663 [INFO][4993] k8s.go 385: Populated endpoint ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0", GenerateName:"calico-apiserver-6d596df75f-", Namespace:"calico-apiserver", SelfLink:"", UID:"a029a21a-4db7-4e58-934c-d8fbf50ce184", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 26, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d596df75f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6d596df75f-75b85", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2bed058771e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.663 [INFO][4993] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.663 [INFO][4993] dataplane_linux.go 68: Setting the host side veth name to cali2bed058771e ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.671 [INFO][4993] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.672 [INFO][4993] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0", GenerateName:"calico-apiserver-6d596df75f-", Namespace:"calico-apiserver", SelfLink:"", UID:"a029a21a-4db7-4e58-934c-d8fbf50ce184", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 26, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d596df75f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211", Pod:"calico-apiserver-6d596df75f-75b85", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2bed058771e", MAC:"02:ed:6c:a9:f0:79", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:26:15.685606 env[1127]: 2024-02-12 20:26:15.680 [INFO][4993] k8s.go 491: Wrote updated endpoint to datastore ContainerID="a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211" Namespace="calico-apiserver" Pod="calico-apiserver-6d596df75f-75b85" WorkloadEndpoint="localhost-k8s-calico--apiserver--6d596df75f--75b85-eth0" Feb 12 20:26:15.700323 env[1127]: time="2024-02-12T20:26:15.697708242Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:26:15.700323 env[1127]: time="2024-02-12T20:26:15.697744501Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:26:15.700323 env[1127]: time="2024-02-12T20:26:15.697753468Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:26:15.700323 env[1127]: time="2024-02-12T20:26:15.697851325Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211 pid=5039 runtime=io.containerd.runc.v2 Feb 12 20:26:15.703000 audit[5051]: NETFILTER_CFG table=filter:132 family=2 entries=51 op=nft_register_chain pid=5051 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:26:15.703000 audit[5051]: SYSCALL arch=c000003e syscall=46 success=yes exit=26900 a0=3 a1=7fffb00c45b0 a2=0 a3=7fffb00c459c items=0 ppid=3588 pid=5051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.703000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:26:15.715531 systemd[1]: Started cri-containerd-a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211.scope. Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.724000 audit: BPF prog-id=180 op=LOAD Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=5039 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134653830343261306263613631306435303063333531343261663561 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=5039 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134653830343261306263613631306435303063333531343261663561 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit: BPF prog-id=181 op=LOAD Feb 12 20:26:15.725000 audit[5052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0001b9a60 items=0 ppid=5039 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134653830343261306263613631306435303063333531343261663561 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit: BPF prog-id=182 op=LOAD Feb 12 20:26:15.725000 audit[5052]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0001b9aa8 items=0 ppid=5039 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134653830343261306263613631306435303063333531343261663561 Feb 12 20:26:15.725000 audit: BPF prog-id=182 op=UNLOAD Feb 12 20:26:15.725000 audit: BPF prog-id=181 op=UNLOAD Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { perfmon } for pid=5052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit[5052]: AVC avc: denied { bpf } for pid=5052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:15.725000 audit: BPF prog-id=183 op=LOAD Feb 12 20:26:15.725000 audit[5052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0001b9eb8 items=0 ppid=5039 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:15.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134653830343261306263613631306435303063333531343261663561 Feb 12 20:26:15.727321 systemd-resolved[1063]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 12 20:26:15.751673 env[1127]: time="2024-02-12T20:26:15.751456237Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d596df75f-75b85,Uid:a029a21a-4db7-4e58-934c-d8fbf50ce184,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211\"" Feb 12 20:26:15.754036 env[1127]: time="2024-02-12T20:26:15.752858363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 12 20:26:17.634551 systemd-networkd[1018]: cali2bed058771e: Gained IPv6LL Feb 12 20:26:19.879312 kubelet[2037]: E0212 20:26:19.879255 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:26:20.131163 kernel: kauditd_printk_skb: 61 callbacks suppressed Feb 12 20:26:20.131380 kernel: audit: type=1130 audit(1707769580.126:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.74:22-10.0.0.1:35022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:20.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.74:22-10.0.0.1:35022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:20.127461 systemd[1]: Started sshd@25-10.0.0.74:22-10.0.0.1:35022.service. Feb 12 20:26:20.166000 audit[5095]: USER_ACCT pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.169000 audit[5095]: CRED_ACQ pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.170664 sshd[5095]: Accepted publickey for core from 10.0.0.1 port 35022 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:26:20.170822 sshd[5095]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:26:20.171384 kernel: audit: type=1101 audit(1707769580.166:1525): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.171430 kernel: audit: type=1103 audit(1707769580.169:1526): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.174537 kernel: audit: type=1006 audit(1707769580.169:1527): pid=5095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 12 20:26:20.174583 kernel: audit: type=1300 audit(1707769580.169:1527): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecdbdb00 a2=3 a3=0 items=0 ppid=1 pid=5095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:20.169000 audit[5095]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecdbdb00 a2=3 a3=0 items=0 ppid=1 pid=5095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:20.174239 systemd-logind[1109]: New session 26 of user core. Feb 12 20:26:20.174599 systemd[1]: Started session-26.scope. Feb 12 20:26:20.169000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:20.178101 kernel: audit: type=1327 audit(1707769580.169:1527): proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:20.177000 audit[5095]: USER_START pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.184573 kernel: audit: type=1105 audit(1707769580.177:1528): pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.184614 kernel: audit: type=1103 audit(1707769580.178:1529): pid=5097 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.178000 audit[5097]: CRED_ACQ pid=5097 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.279666 sshd[5095]: pam_unix(sshd:session): session closed for user core Feb 12 20:26:20.286960 kernel: audit: type=1106 audit(1707769580.279:1530): pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.287038 kernel: audit: type=1104 audit(1707769580.279:1531): pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.279000 audit[5095]: USER_END pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.279000 audit[5095]: CRED_DISP pid=5095 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:20.282196 systemd[1]: sshd@25-10.0.0.74:22-10.0.0.1:35022.service: Deactivated successfully. Feb 12 20:26:20.283049 systemd[1]: session-26.scope: Deactivated successfully. Feb 12 20:26:20.283707 systemd-logind[1109]: Session 26 logged out. Waiting for processes to exit. Feb 12 20:26:20.284555 systemd-logind[1109]: Removed session 26. Feb 12 20:26:20.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.74:22-10.0.0.1:35022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:21.097418 env[1127]: time="2024-02-12T20:26:21.097363204Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:26:21.099345 env[1127]: time="2024-02-12T20:26:21.099292065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:26:21.101905 env[1127]: time="2024-02-12T20:26:21.101846012Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:26:21.108195 env[1127]: time="2024-02-12T20:26:21.107921563Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:26:21.108931 env[1127]: time="2024-02-12T20:26:21.108893789Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:848c5b919e8d33dbad8c8c64aa6aec07c29cfe6e4f6312ceafc1641ea929f91a\"" Feb 12 20:26:21.111527 env[1127]: time="2024-02-12T20:26:21.111501688Z" level=info msg="CreateContainer within sandbox \"a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 12 20:26:21.122175 env[1127]: time="2024-02-12T20:26:21.122105465Z" level=info msg="CreateContainer within sandbox \"a4e8042a0bca610d500c35142af5aebcd7a97ad44dad7cc5242d10cfb4519211\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"71f45291637f99f503d90cb478e5c72bcbb276f88305099b2783ed37c40472f6\"" Feb 12 20:26:21.124040 env[1127]: time="2024-02-12T20:26:21.123972337Z" level=info msg="StartContainer for \"71f45291637f99f503d90cb478e5c72bcbb276f88305099b2783ed37c40472f6\"" Feb 12 20:26:21.146854 systemd[1]: Started cri-containerd-71f45291637f99f503d90cb478e5c72bcbb276f88305099b2783ed37c40472f6.scope. Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.157000 audit: BPF prog-id=184 op=LOAD Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=5039 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:21.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663435323931363337663939663530336439306362343738653563 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=5039 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:21.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663435323931363337663939663530336439306362343738653563 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit: BPF prog-id=185 op=LOAD Feb 12 20:26:21.158000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000398ce0 items=0 ppid=5039 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:21.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663435323931363337663939663530336439306362343738653563 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit: BPF prog-id=186 op=LOAD Feb 12 20:26:21.158000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000398d28 items=0 ppid=5039 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:21.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663435323931363337663939663530336439306362343738653563 Feb 12 20:26:21.158000 audit: BPF prog-id=186 op=UNLOAD Feb 12 20:26:21.158000 audit: BPF prog-id=185 op=UNLOAD Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:21.158000 audit: BPF prog-id=187 op=LOAD Feb 12 20:26:21.158000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000399138 items=0 ppid=5039 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:21.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731663435323931363337663939663530336439306362343738653563 Feb 12 20:26:21.220805 env[1127]: time="2024-02-12T20:26:21.220720662Z" level=info msg="StartContainer for \"71f45291637f99f503d90cb478e5c72bcbb276f88305099b2783ed37c40472f6\" returns successfully" Feb 12 20:26:21.549000 audit[5126]: AVC avc: denied { watch } for pid=5126 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_20_26_15.1532504791/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c243,c266 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c243,c266 tclass=file permissive=0 Feb 12 20:26:21.549000 audit[5126]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002a0400 a2=fc6 a3=0 items=0 ppid=5039 pid=5126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c243,c266 key=(null) Feb 12 20:26:21.549000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 12 20:26:22.134000 audit[5172]: NETFILTER_CFG table=filter:133 family=2 entries=8 op=nft_register_rule pid=5172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:22.134000 audit[5172]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffe3ebdf4a0 a2=0 a3=7ffe3ebdf48c items=0 ppid=2223 pid=5172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:22.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:22.138000 audit[5172]: NETFILTER_CFG table=nat:134 family=2 entries=198 op=nft_register_rule pid=5172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:22.138000 audit[5172]: SYSCALL arch=c000003e syscall=46 success=yes exit=66940 a0=3 a1=7ffe3ebdf4a0 a2=0 a3=7ffe3ebdf48c items=0 ppid=2223 pid=5172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:22.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:22.171000 audit[5198]: NETFILTER_CFG table=filter:135 family=2 entries=8 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:22.171000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff9c8f1c10 a2=0 a3=7fff9c8f1bfc items=0 ppid=2223 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:22.171000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:22.174000 audit[5198]: NETFILTER_CFG table=nat:136 family=2 entries=198 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:26:22.174000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=66940 a0=3 a1=7fff9c8f1c10 a2=0 a3=7fff9c8f1bfc items=0 ppid=2223 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:22.174000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:26:22.879602 kubelet[2037]: E0212 20:26:22.879566 2037 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 12 20:26:25.284952 systemd[1]: Started sshd@26-10.0.0.74:22-10.0.0.1:39206.service. Feb 12 20:26:25.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.74:22-10.0.0.1:39206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:25.289629 kernel: kauditd_printk_skb: 73 callbacks suppressed Feb 12 20:26:25.289687 kernel: audit: type=1130 audit(1707769585.283:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.74:22-10.0.0.1:39206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:26:25.326000 audit[5203]: USER_ACCT pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.328422 sshd[5203]: Accepted publickey for core from 10.0.0.1 port 39206 ssh2: RSA SHA256:0TYEZ+ET1/q46mu/UgoG+6MHo530B5lZPCcmxDlyeg8 Feb 12 20:26:25.330797 sshd[5203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:26:25.329000 audit[5203]: CRED_ACQ pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.333710 kernel: audit: type=1101 audit(1707769585.326:1557): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.333756 kernel: audit: type=1103 audit(1707769585.329:1558): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.333788 kernel: audit: type=1006 audit(1707769585.329:1559): pid=5203 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 12 20:26:25.334096 systemd-logind[1109]: New session 27 of user core. Feb 12 20:26:25.334924 systemd[1]: Started session-27.scope. Feb 12 20:26:25.329000 audit[5203]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64fabc70 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:25.338102 kernel: audit: type=1300 audit(1707769585.329:1559): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64fabc70 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:25.338156 kernel: audit: type=1327 audit(1707769585.329:1559): proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:25.329000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:26:25.339046 kernel: audit: type=1105 audit(1707769585.337:1560): pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.337000 audit[5203]: USER_START pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.342170 kernel: audit: type=1103 audit(1707769585.338:1561): pid=5205 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.338000 audit[5205]: CRED_ACQ pid=5205 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.437321 sshd[5203]: pam_unix(sshd:session): session closed for user core Feb 12 20:26:25.436000 audit[5203]: USER_END pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.439707 systemd[1]: sshd@26-10.0.0.74:22-10.0.0.1:39206.service: Deactivated successfully. Feb 12 20:26:25.440600 systemd[1]: session-27.scope: Deactivated successfully. Feb 12 20:26:25.436000 audit[5203]: CRED_DISP pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.441414 systemd-logind[1109]: Session 27 logged out. Waiting for processes to exit. Feb 12 20:26:25.442328 systemd-logind[1109]: Removed session 27. Feb 12 20:26:25.443781 kernel: audit: type=1106 audit(1707769585.436:1562): pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.443842 kernel: audit: type=1104 audit(1707769585.436:1563): pid=5203 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 12 20:26:25.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.74:22-10.0.0.1:39206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'