Jul 2 01:49:12.017197 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 2 01:49:12.017219 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Jul 1 23:37:37 -00 2024 Jul 2 01:49:12.017228 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Jul 2 01:49:12.017237 kernel: printk: bootconsole [pl11] enabled Jul 2 01:49:12.017242 kernel: efi: EFI v2.70 by EDK II Jul 2 01:49:12.017249 kernel: efi: ACPI 2.0=0x3fd89018 SMBIOS=0x3fd66000 SMBIOS 3.0=0x3fd64000 MEMATTR=0x3ef3c198 RNG=0x3fd89998 MEMRESERVE=0x37b33f98 Jul 2 01:49:12.017257 kernel: random: crng init done Jul 2 01:49:12.017263 kernel: ACPI: Early table checksum verification disabled Jul 2 01:49:12.017269 kernel: ACPI: RSDP 0x000000003FD89018 000024 (v02 VRTUAL) Jul 2 01:49:12.017276 kernel: ACPI: XSDT 0x000000003FD89F18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017283 kernel: ACPI: FACP 0x000000003FD89C18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017291 kernel: ACPI: DSDT 0x000000003EBD2018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Jul 2 01:49:12.017298 kernel: ACPI: DBG2 0x000000003FD89B18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017304 kernel: ACPI: GTDT 0x000000003FD89D98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017312 kernel: ACPI: OEM0 0x000000003FD89098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017319 kernel: ACPI: SPCR 0x000000003FD89A98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017326 kernel: ACPI: APIC 0x000000003FD89818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017333 kernel: ACPI: SRAT 0x000000003FD89198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017340 kernel: ACPI: PPTT 0x000000003FD89418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Jul 2 01:49:12.017347 kernel: ACPI: BGRT 0x000000003FD89E98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jul 2 01:49:12.017354 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Jul 2 01:49:12.017361 kernel: NUMA: Failed to initialise from firmware Jul 2 01:49:12.017368 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Jul 2 01:49:12.017375 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Jul 2 01:49:12.017382 kernel: Zone ranges: Jul 2 01:49:12.017389 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Jul 2 01:49:12.017396 kernel: DMA32 empty Jul 2 01:49:12.017405 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Jul 2 01:49:12.017411 kernel: Movable zone start for each node Jul 2 01:49:12.017418 kernel: Early memory node ranges Jul 2 01:49:12.017425 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Jul 2 01:49:12.017431 kernel: node 0: [mem 0x0000000000824000-0x000000003ec80fff] Jul 2 01:49:12.017437 kernel: node 0: [mem 0x000000003ec81000-0x000000003eca9fff] Jul 2 01:49:12.017443 kernel: node 0: [mem 0x000000003ecaa000-0x000000003fd29fff] Jul 2 01:49:12.017449 kernel: node 0: [mem 0x000000003fd2a000-0x000000003fd7dfff] Jul 2 01:49:12.017455 kernel: node 0: [mem 0x000000003fd7e000-0x000000003fd89fff] Jul 2 01:49:12.017461 kernel: node 0: [mem 0x000000003fd8a000-0x000000003fd8dfff] Jul 2 01:49:12.017467 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fffffff] Jul 2 01:49:12.017473 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Jul 2 01:49:12.017480 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Jul 2 01:49:12.017489 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Jul 2 01:49:12.017495 kernel: psci: probing for conduit method from ACPI. Jul 2 01:49:12.017502 kernel: psci: PSCIv1.1 detected in firmware. Jul 2 01:49:12.017508 kernel: psci: Using standard PSCI v0.2 function IDs Jul 2 01:49:12.017515 kernel: psci: MIGRATE_INFO_TYPE not supported. Jul 2 01:49:12.017522 kernel: psci: SMC Calling Convention v1.4 Jul 2 01:49:12.017528 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Jul 2 01:49:12.017534 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Jul 2 01:49:12.017541 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Jul 2 01:49:12.017547 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Jul 2 01:49:12.017553 kernel: pcpu-alloc: [0] 0 [0] 1 Jul 2 01:49:12.017560 kernel: Detected PIPT I-cache on CPU0 Jul 2 01:49:12.017566 kernel: CPU features: detected: GIC system register CPU interface Jul 2 01:49:12.017572 kernel: CPU features: detected: Hardware dirty bit management Jul 2 01:49:12.017579 kernel: CPU features: detected: Spectre-BHB Jul 2 01:49:12.017585 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 2 01:49:12.017593 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 2 01:49:12.017599 kernel: CPU features: detected: ARM erratum 1418040 Jul 2 01:49:12.017605 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Jul 2 01:49:12.017611 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Jul 2 01:49:12.017618 kernel: Policy zone: Normal Jul 2 01:49:12.017625 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=7b86ecfcd4701bdf4668db795601b20c118ac0b117c34a9b3836e0a5236b73b0 Jul 2 01:49:12.017632 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 01:49:12.017638 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 2 01:49:12.017645 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 01:49:12.017651 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 01:49:12.017658 kernel: software IO TLB: mapped [mem 0x000000003abd2000-0x000000003ebd2000] (64MB) Jul 2 01:49:12.017665 kernel: Memory: 3990260K/4194160K available (9792K kernel code, 2092K rwdata, 7572K rodata, 36352K init, 777K bss, 203900K reserved, 0K cma-reserved) Jul 2 01:49:12.017672 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 01:49:12.017678 kernel: trace event string verifier disabled Jul 2 01:49:12.017684 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 2 01:49:12.017691 kernel: rcu: RCU event tracing is enabled. Jul 2 01:49:12.017698 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 01:49:12.017704 kernel: Trampoline variant of Tasks RCU enabled. Jul 2 01:49:12.017711 kernel: Tracing variant of Tasks RCU enabled. Jul 2 01:49:12.017717 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 01:49:12.017724 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 01:49:12.017731 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 2 01:49:12.017738 kernel: GICv3: 960 SPIs implemented Jul 2 01:49:12.017744 kernel: GICv3: 0 Extended SPIs implemented Jul 2 01:49:12.017750 kernel: GICv3: Distributor has no Range Selector support Jul 2 01:49:12.017756 kernel: Root IRQ handler: gic_handle_irq Jul 2 01:49:12.017762 kernel: GICv3: 16 PPIs implemented Jul 2 01:49:12.017769 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Jul 2 01:49:12.017775 kernel: ITS: No ITS available, not enabling LPIs Jul 2 01:49:12.017781 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 2 01:49:12.017787 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 2 01:49:12.017794 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 2 01:49:12.017800 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 2 01:49:12.017808 kernel: Console: colour dummy device 80x25 Jul 2 01:49:12.017814 kernel: printk: console [tty1] enabled Jul 2 01:49:12.017821 kernel: ACPI: Core revision 20210730 Jul 2 01:49:12.017828 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 2 01:49:12.017835 kernel: pid_max: default: 32768 minimum: 301 Jul 2 01:49:12.017841 kernel: LSM: Security Framework initializing Jul 2 01:49:12.017847 kernel: SELinux: Initializing. Jul 2 01:49:12.017854 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 01:49:12.017861 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 01:49:12.017868 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Jul 2 01:49:12.017875 kernel: Hyper-V: Host Build 10.0.22477.1369-1-0 Jul 2 01:49:12.017881 kernel: rcu: Hierarchical SRCU implementation. Jul 2 01:49:12.017888 kernel: Remapping and enabling EFI services. Jul 2 01:49:12.017894 kernel: smp: Bringing up secondary CPUs ... Jul 2 01:49:12.017900 kernel: Detected PIPT I-cache on CPU1 Jul 2 01:49:12.017907 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Jul 2 01:49:12.021961 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 2 01:49:12.021974 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 2 01:49:12.021987 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 01:49:12.021994 kernel: SMP: Total of 2 processors activated. Jul 2 01:49:12.022001 kernel: CPU features: detected: 32-bit EL0 Support Jul 2 01:49:12.022009 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Jul 2 01:49:12.022016 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 2 01:49:12.022023 kernel: CPU features: detected: CRC32 instructions Jul 2 01:49:12.022029 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 2 01:49:12.022036 kernel: CPU features: detected: LSE atomic instructions Jul 2 01:49:12.022042 kernel: CPU features: detected: Privileged Access Never Jul 2 01:49:12.022050 kernel: CPU: All CPU(s) started at EL1 Jul 2 01:49:12.022057 kernel: alternatives: patching kernel code Jul 2 01:49:12.022069 kernel: devtmpfs: initialized Jul 2 01:49:12.022077 kernel: KASLR enabled Jul 2 01:49:12.022084 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 01:49:12.022091 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 01:49:12.022099 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 01:49:12.022106 kernel: SMBIOS 3.1.0 present. Jul 2 01:49:12.022113 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 11/28/2023 Jul 2 01:49:12.022120 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 01:49:12.022129 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 2 01:49:12.022136 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 2 01:49:12.022143 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 2 01:49:12.022150 kernel: audit: initializing netlink subsys (disabled) Jul 2 01:49:12.022157 kernel: audit: type=2000 audit(0.090:1): state=initialized audit_enabled=0 res=1 Jul 2 01:49:12.022165 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 01:49:12.022172 kernel: cpuidle: using governor menu Jul 2 01:49:12.022180 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 2 01:49:12.022187 kernel: ASID allocator initialised with 32768 entries Jul 2 01:49:12.022194 kernel: ACPI: bus type PCI registered Jul 2 01:49:12.022201 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 01:49:12.022208 kernel: Serial: AMBA PL011 UART driver Jul 2 01:49:12.022215 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 01:49:12.022222 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 2 01:49:12.022229 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 01:49:12.022236 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 2 01:49:12.022244 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 01:49:12.022251 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 2 01:49:12.022258 kernel: ACPI: Added _OSI(Module Device) Jul 2 01:49:12.022265 kernel: ACPI: Added _OSI(Processor Device) Jul 2 01:49:12.022272 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 01:49:12.022280 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 01:49:12.022287 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 01:49:12.022294 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 01:49:12.022301 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 01:49:12.022309 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 01:49:12.022316 kernel: ACPI: Interpreter enabled Jul 2 01:49:12.022324 kernel: ACPI: Using GIC for interrupt routing Jul 2 01:49:12.022331 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Jul 2 01:49:12.022338 kernel: printk: console [ttyAMA0] enabled Jul 2 01:49:12.022344 kernel: printk: bootconsole [pl11] disabled Jul 2 01:49:12.022351 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Jul 2 01:49:12.022359 kernel: iommu: Default domain type: Translated Jul 2 01:49:12.022365 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 2 01:49:12.022374 kernel: vgaarb: loaded Jul 2 01:49:12.022381 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 01:49:12.022388 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 01:49:12.022395 kernel: PTP clock support registered Jul 2 01:49:12.022402 kernel: Registered efivars operations Jul 2 01:49:12.022409 kernel: No ACPI PMU IRQ for CPU0 Jul 2 01:49:12.022416 kernel: No ACPI PMU IRQ for CPU1 Jul 2 01:49:12.022423 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 2 01:49:12.022430 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 01:49:12.022438 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 01:49:12.022445 kernel: pnp: PnP ACPI init Jul 2 01:49:12.022452 kernel: pnp: PnP ACPI: found 0 devices Jul 2 01:49:12.022459 kernel: NET: Registered PF_INET protocol family Jul 2 01:49:12.022466 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 2 01:49:12.022473 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 2 01:49:12.022481 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 01:49:12.022488 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 01:49:12.022495 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 2 01:49:12.022504 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 2 01:49:12.022511 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 01:49:12.022518 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 01:49:12.022525 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 01:49:12.022532 kernel: PCI: CLS 0 bytes, default 64 Jul 2 01:49:12.022539 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Jul 2 01:49:12.022546 kernel: kvm [1]: HYP mode not available Jul 2 01:49:12.022552 kernel: Initialise system trusted keyrings Jul 2 01:49:12.022559 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 2 01:49:12.022567 kernel: Key type asymmetric registered Jul 2 01:49:12.022574 kernel: Asymmetric key parser 'x509' registered Jul 2 01:49:12.022581 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 01:49:12.022588 kernel: io scheduler mq-deadline registered Jul 2 01:49:12.022595 kernel: io scheduler kyber registered Jul 2 01:49:12.022602 kernel: io scheduler bfq registered Jul 2 01:49:12.022609 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 01:49:12.022616 kernel: thunder_xcv, ver 1.0 Jul 2 01:49:12.022623 kernel: thunder_bgx, ver 1.0 Jul 2 01:49:12.022631 kernel: nicpf, ver 1.0 Jul 2 01:49:12.022638 kernel: nicvf, ver 1.0 Jul 2 01:49:12.022780 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 2 01:49:12.022846 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-07-02T01:49:11 UTC (1719884951) Jul 2 01:49:12.022856 kernel: efifb: probing for efifb Jul 2 01:49:12.022863 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Jul 2 01:49:12.022870 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Jul 2 01:49:12.022884 kernel: efifb: scrolling: redraw Jul 2 01:49:12.022895 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 2 01:49:12.022902 kernel: Console: switching to colour frame buffer device 128x48 Jul 2 01:49:12.022909 kernel: fb0: EFI VGA frame buffer device Jul 2 01:49:12.022934 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Jul 2 01:49:12.022942 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 2 01:49:12.022949 kernel: NET: Registered PF_INET6 protocol family Jul 2 01:49:12.022956 kernel: Segment Routing with IPv6 Jul 2 01:49:12.022963 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 01:49:12.022970 kernel: NET: Registered PF_PACKET protocol family Jul 2 01:49:12.022979 kernel: Key type dns_resolver registered Jul 2 01:49:12.022986 kernel: registered taskstats version 1 Jul 2 01:49:12.022993 kernel: Loading compiled-in X.509 certificates Jul 2 01:49:12.023000 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: c418313b450e4055b23e41c11cb6dc415de0265d' Jul 2 01:49:12.023007 kernel: Key type .fscrypt registered Jul 2 01:49:12.023014 kernel: Key type fscrypt-provisioning registered Jul 2 01:49:12.023021 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 01:49:12.023028 kernel: ima: Allocated hash algorithm: sha1 Jul 2 01:49:12.023035 kernel: ima: No architecture policies found Jul 2 01:49:12.023043 kernel: clk: Disabling unused clocks Jul 2 01:49:12.023050 kernel: Freeing unused kernel memory: 36352K Jul 2 01:49:12.023057 kernel: Run /init as init process Jul 2 01:49:12.023064 kernel: with arguments: Jul 2 01:49:12.023071 kernel: /init Jul 2 01:49:12.023077 kernel: with environment: Jul 2 01:49:12.023084 kernel: HOME=/ Jul 2 01:49:12.023091 kernel: TERM=linux Jul 2 01:49:12.023098 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 01:49:12.023109 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 01:49:12.023119 systemd[1]: Detected virtualization microsoft. Jul 2 01:49:12.023126 systemd[1]: Detected architecture arm64. Jul 2 01:49:12.023134 systemd[1]: Running in initrd. Jul 2 01:49:12.023141 systemd[1]: No hostname configured, using default hostname. Jul 2 01:49:12.023149 systemd[1]: Hostname set to . Jul 2 01:49:12.023157 systemd[1]: Initializing machine ID from random generator. Jul 2 01:49:12.023166 systemd[1]: Queued start job for default target initrd.target. Jul 2 01:49:12.023173 systemd[1]: Started systemd-ask-password-console.path. Jul 2 01:49:12.023181 systemd[1]: Reached target cryptsetup.target. Jul 2 01:49:12.023188 systemd[1]: Reached target paths.target. Jul 2 01:49:12.023195 systemd[1]: Reached target slices.target. Jul 2 01:49:12.023203 systemd[1]: Reached target swap.target. Jul 2 01:49:12.023210 systemd[1]: Reached target timers.target. Jul 2 01:49:12.023218 systemd[1]: Listening on iscsid.socket. Jul 2 01:49:12.023226 systemd[1]: Listening on iscsiuio.socket. Jul 2 01:49:12.023234 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 01:49:12.023241 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 01:49:12.023249 systemd[1]: Listening on systemd-journald.socket. Jul 2 01:49:12.023256 systemd[1]: Listening on systemd-networkd.socket. Jul 2 01:49:12.023264 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 01:49:12.023272 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 01:49:12.023279 systemd[1]: Reached target sockets.target. Jul 2 01:49:12.023287 systemd[1]: Starting kmod-static-nodes.service... Jul 2 01:49:12.023296 systemd[1]: Finished network-cleanup.service. Jul 2 01:49:12.023303 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 01:49:12.023311 systemd[1]: Starting systemd-journald.service... Jul 2 01:49:12.023319 systemd[1]: Starting systemd-modules-load.service... Jul 2 01:49:12.023326 systemd[1]: Starting systemd-resolved.service... Jul 2 01:49:12.023334 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 01:49:12.023345 systemd-journald[275]: Journal started Jul 2 01:49:12.023393 systemd-journald[275]: Runtime Journal (/run/log/journal/72c7c72ba8bd470eaf0b571f444b0aca) is 8.0M, max 78.6M, 70.6M free. Jul 2 01:49:12.002984 systemd-modules-load[276]: Inserted module 'overlay' Jul 2 01:49:12.046156 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 01:49:12.055944 systemd[1]: Started systemd-journald.service. Jul 2 01:49:12.056102 systemd-resolved[277]: Positive Trust Anchors: Jul 2 01:49:12.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.059876 systemd-resolved[277]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 01:49:12.123514 kernel: audit: type=1130 audit(1719884952.059:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.123540 kernel: Bridge firewalling registered Jul 2 01:49:12.123557 kernel: audit: type=1130 audit(1719884952.094:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.059922 systemd-resolved[277]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 01:49:12.180952 kernel: SCSI subsystem initialized Jul 2 01:49:12.180987 kernel: audit: type=1130 audit(1719884952.128:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.060469 systemd[1]: Finished kmod-static-nodes.service. Jul 2 01:49:12.211383 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 01:49:12.211404 kernel: device-mapper: uevent: version 1.0.3 Jul 2 01:49:12.211420 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 01:49:12.064972 systemd-resolved[277]: Defaulting to hostname 'linux'. Jul 2 01:49:12.237355 kernel: audit: type=1130 audit(1719884952.215:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.088988 systemd-modules-load[276]: Inserted module 'br_netfilter' Jul 2 01:49:12.294989 kernel: audit: type=1130 audit(1719884952.241:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.295018 kernel: audit: type=1130 audit(1719884952.267:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.095170 systemd[1]: Started systemd-resolved.service. Jul 2 01:49:12.159824 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 01:49:12.215189 systemd-modules-load[276]: Inserted module 'dm_multipath' Jul 2 01:49:12.216288 systemd[1]: Finished systemd-modules-load.service. Jul 2 01:49:12.242396 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 01:49:12.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.268430 systemd[1]: Reached target nss-lookup.target. Jul 2 01:49:12.304185 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 01:49:12.391377 kernel: audit: type=1130 audit(1719884952.343:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.391402 kernel: audit: type=1130 audit(1719884952.370:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.313757 systemd[1]: Starting systemd-sysctl.service... Jul 2 01:49:12.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.328502 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 01:49:12.431495 kernel: audit: type=1130 audit(1719884952.396:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.431554 dracut-cmdline[299]: dracut-dracut-053 Jul 2 01:49:12.336126 systemd[1]: Finished systemd-sysctl.service. Jul 2 01:49:12.441358 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=7b86ecfcd4701bdf4668db795601b20c118ac0b117c34a9b3836e0a5236b73b0 Jul 2 01:49:12.361583 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 01:49:12.370500 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 01:49:12.400781 systemd[1]: Starting dracut-cmdline.service... Jul 2 01:49:12.544942 kernel: Loading iSCSI transport class v2.0-870. Jul 2 01:49:12.559933 kernel: iscsi: registered transport (tcp) Jul 2 01:49:12.580273 kernel: iscsi: registered transport (qla4xxx) Jul 2 01:49:12.580295 kernel: QLogic iSCSI HBA Driver Jul 2 01:49:12.614715 systemd[1]: Finished dracut-cmdline.service. Jul 2 01:49:12.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:12.619902 systemd[1]: Starting dracut-pre-udev.service... Jul 2 01:49:12.677935 kernel: raid6: neonx8 gen() 13804 MB/s Jul 2 01:49:12.693926 kernel: raid6: neonx8 xor() 10822 MB/s Jul 2 01:49:12.714923 kernel: raid6: neonx4 gen() 13560 MB/s Jul 2 01:49:12.736925 kernel: raid6: neonx4 xor() 11311 MB/s Jul 2 01:49:12.756923 kernel: raid6: neonx2 gen() 12956 MB/s Jul 2 01:49:12.776922 kernel: raid6: neonx2 xor() 10242 MB/s Jul 2 01:49:12.797923 kernel: raid6: neonx1 gen() 10479 MB/s Jul 2 01:49:12.817926 kernel: raid6: neonx1 xor() 8797 MB/s Jul 2 01:49:12.837927 kernel: raid6: int64x8 gen() 6272 MB/s Jul 2 01:49:12.859928 kernel: raid6: int64x8 xor() 3541 MB/s Jul 2 01:49:12.879922 kernel: raid6: int64x4 gen() 7233 MB/s Jul 2 01:49:12.899926 kernel: raid6: int64x4 xor() 3858 MB/s Jul 2 01:49:12.922924 kernel: raid6: int64x2 gen() 6149 MB/s Jul 2 01:49:12.943927 kernel: raid6: int64x2 xor() 3320 MB/s Jul 2 01:49:12.964927 kernel: raid6: int64x1 gen() 5047 MB/s Jul 2 01:49:12.990533 kernel: raid6: int64x1 xor() 2645 MB/s Jul 2 01:49:12.990544 kernel: raid6: using algorithm neonx8 gen() 13804 MB/s Jul 2 01:49:12.990553 kernel: raid6: .... xor() 10822 MB/s, rmw enabled Jul 2 01:49:12.994873 kernel: raid6: using neon recovery algorithm Jul 2 01:49:13.016724 kernel: xor: measuring software checksum speed Jul 2 01:49:13.016738 kernel: 8regs : 17282 MB/sec Jul 2 01:49:13.020927 kernel: 32regs : 20755 MB/sec Jul 2 01:49:13.029855 kernel: arm64_neon : 27930 MB/sec Jul 2 01:49:13.029870 kernel: xor: using function: arm64_neon (27930 MB/sec) Jul 2 01:49:13.085935 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 2 01:49:13.096736 systemd[1]: Finished dracut-pre-udev.service. Jul 2 01:49:13.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:13.104000 audit: BPF prog-id=7 op=LOAD Jul 2 01:49:13.104000 audit: BPF prog-id=8 op=LOAD Jul 2 01:49:13.106021 systemd[1]: Starting systemd-udevd.service... Jul 2 01:49:13.124685 systemd-udevd[476]: Using default interface naming scheme 'v252'. Jul 2 01:49:13.132023 systemd[1]: Started systemd-udevd.service. Jul 2 01:49:13.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:13.142767 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 01:49:13.157742 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Jul 2 01:49:13.187781 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 01:49:13.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:13.193467 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 01:49:13.227003 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 01:49:13.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:13.280963 kernel: hv_vmbus: Vmbus version:5.3 Jul 2 01:49:13.289939 kernel: hv_vmbus: registering driver hid_hyperv Jul 2 01:49:13.304937 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Jul 2 01:49:13.314004 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Jul 2 01:49:13.323936 kernel: hv_vmbus: registering driver hyperv_keyboard Jul 2 01:49:13.323993 kernel: hv_vmbus: registering driver hv_netvsc Jul 2 01:49:13.343460 kernel: hv_vmbus: registering driver hv_storvsc Jul 2 01:49:13.343512 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Jul 2 01:49:13.348933 kernel: scsi host1: storvsc_host_t Jul 2 01:49:13.349128 kernel: scsi host0: storvsc_host_t Jul 2 01:49:13.365155 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Jul 2 01:49:13.365226 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Jul 2 01:49:13.387565 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Jul 2 01:49:13.387801 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 2 01:49:13.388929 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Jul 2 01:49:13.403763 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Jul 2 01:49:13.403963 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Jul 2 01:49:13.409101 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 2 01:49:13.409271 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Jul 2 01:49:13.409364 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Jul 2 01:49:13.421944 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 2 01:49:13.426931 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 2 01:49:13.436940 kernel: hv_netvsc 002248b7-8c10-0022-48b7-8c10002248b7 eth0: VF slot 1 added Jul 2 01:49:13.452923 kernel: hv_vmbus: registering driver hv_pci Jul 2 01:49:13.452973 kernel: hv_pci 5bd9d1af-bb21-46a4-83aa-1f6cf226a6d9: PCI VMBus probing: Using version 0x10004 Jul 2 01:49:13.469088 kernel: hv_pci 5bd9d1af-bb21-46a4-83aa-1f6cf226a6d9: PCI host bridge to bus bb21:00 Jul 2 01:49:13.469285 kernel: pci_bus bb21:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Jul 2 01:49:13.469386 kernel: pci_bus bb21:00: No busn resource found for root bus, will use [bus 00-ff] Jul 2 01:49:13.481381 kernel: pci bb21:00:02.0: [15b3:1018] type 00 class 0x020000 Jul 2 01:49:13.496360 kernel: pci bb21:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Jul 2 01:49:13.517199 kernel: pci bb21:00:02.0: enabling Extended Tags Jul 2 01:49:13.540485 kernel: pci bb21:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at bb21:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Jul 2 01:49:13.540610 kernel: pci_bus bb21:00: busn_res: [bus 00-ff] end is updated to 00 Jul 2 01:49:13.540690 kernel: pci bb21:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Jul 2 01:49:13.587933 kernel: mlx5_core bb21:00:02.0: firmware version: 16.30.1284 Jul 2 01:49:13.745931 kernel: mlx5_core bb21:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Jul 2 01:49:13.803483 kernel: hv_netvsc 002248b7-8c10-0022-48b7-8c10002248b7 eth0: VF registering: eth1 Jul 2 01:49:13.803678 kernel: mlx5_core bb21:00:02.0 eth1: joined to eth0 Jul 2 01:49:13.814933 kernel: mlx5_core bb21:00:02.0 enP47905s1: renamed from eth1 Jul 2 01:49:13.877852 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 01:49:13.915936 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (529) Jul 2 01:49:13.928556 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 01:49:14.075571 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 01:49:14.110138 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 01:49:14.115779 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 01:49:14.130376 systemd[1]: Starting disk-uuid.service... Jul 2 01:49:14.154188 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 2 01:49:15.169377 disk-uuid[602]: The operation has completed successfully. Jul 2 01:49:15.174571 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 2 01:49:15.231347 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 01:49:15.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.231449 systemd[1]: Finished disk-uuid.service. Jul 2 01:49:15.240560 systemd[1]: Starting verity-setup.service... Jul 2 01:49:15.284099 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 2 01:49:15.476246 systemd[1]: Found device dev-mapper-usr.device. Jul 2 01:49:15.482999 systemd[1]: Mounting sysusr-usr.mount... Jul 2 01:49:15.492934 systemd[1]: Finished verity-setup.service. Jul 2 01:49:15.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.550945 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 01:49:15.551275 systemd[1]: Mounted sysusr-usr.mount. Jul 2 01:49:15.555057 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 01:49:15.555799 systemd[1]: Starting ignition-setup.service... Jul 2 01:49:15.569138 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 01:49:15.598888 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Jul 2 01:49:15.598953 kernel: BTRFS info (device sda6): using free space tree Jul 2 01:49:15.603218 kernel: BTRFS info (device sda6): has skinny extents Jul 2 01:49:15.651440 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 01:49:15.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.660000 audit: BPF prog-id=9 op=LOAD Jul 2 01:49:15.660682 systemd[1]: Starting systemd-networkd.service... Jul 2 01:49:15.681084 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 01:49:15.687575 systemd-networkd[869]: lo: Link UP Jul 2 01:49:15.687588 systemd-networkd[869]: lo: Gained carrier Jul 2 01:49:15.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.687989 systemd-networkd[869]: Enumeration completed Jul 2 01:49:15.690932 systemd[1]: Started systemd-networkd.service. Jul 2 01:49:15.691384 systemd-networkd[869]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 01:49:15.695837 systemd[1]: Reached target network.target. Jul 2 01:49:15.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.706902 systemd[1]: Starting iscsiuio.service... Jul 2 01:49:15.731751 iscsid[878]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 01:49:15.731751 iscsid[878]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Jul 2 01:49:15.731751 iscsid[878]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 01:49:15.731751 iscsid[878]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 01:49:15.731751 iscsid[878]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 01:49:15.731751 iscsid[878]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 01:49:15.731751 iscsid[878]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 01:49:15.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.714757 systemd[1]: Started iscsiuio.service. Jul 2 01:49:15.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.725465 systemd[1]: Starting iscsid.service... Jul 2 01:49:15.742195 systemd[1]: Started iscsid.service. Jul 2 01:49:15.763177 systemd[1]: Starting dracut-initqueue.service... Jul 2 01:49:15.805008 systemd[1]: Finished dracut-initqueue.service. Jul 2 01:49:15.809606 systemd[1]: Reached target remote-fs-pre.target. Jul 2 01:49:15.817214 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 01:49:15.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.825068 systemd[1]: Reached target remote-fs.target. Jul 2 01:49:15.833040 systemd[1]: Starting dracut-pre-mount.service... Jul 2 01:49:15.852296 systemd[1]: Finished dracut-pre-mount.service. Jul 2 01:49:15.870009 systemd[1]: Finished ignition-setup.service. Jul 2 01:49:15.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:15.878583 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 01:49:15.913929 kernel: mlx5_core bb21:00:02.0 enP47905s1: Link up Jul 2 01:49:15.954099 kernel: hv_netvsc 002248b7-8c10-0022-48b7-8c10002248b7 eth0: Data path switched to VF: enP47905s1 Jul 2 01:49:15.954933 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 01:49:15.954492 systemd-networkd[869]: enP47905s1: Link UP Jul 2 01:49:15.954563 systemd-networkd[869]: eth0: Link UP Jul 2 01:49:15.954647 systemd-networkd[869]: eth0: Gained carrier Jul 2 01:49:15.962094 systemd-networkd[869]: enP47905s1: Gained carrier Jul 2 01:49:15.971991 systemd-networkd[869]: eth0: DHCPv4 address 10.200.20.39/24, gateway 10.200.20.1 acquired from 168.63.129.16 Jul 2 01:49:17.394116 systemd-networkd[869]: eth0: Gained IPv6LL Jul 2 01:49:18.468946 ignition[893]: Ignition 2.14.0 Jul 2 01:49:18.471843 ignition[893]: Stage: fetch-offline Jul 2 01:49:18.471935 ignition[893]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:18.471964 ignition[893]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:18.488854 ignition[893]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:18.489256 ignition[893]: parsed url from cmdline: "" Jul 2 01:49:18.489261 ignition[893]: no config URL provided Jul 2 01:49:18.489268 ignition[893]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 01:49:18.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.500710 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 01:49:18.541792 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 2 01:49:18.541814 kernel: audit: type=1130 audit(1719884958.508:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.489298 ignition[893]: no config at "/usr/lib/ignition/user.ign" Jul 2 01:49:18.518349 systemd[1]: Starting ignition-fetch.service... Jul 2 01:49:18.489303 ignition[893]: failed to fetch config: resource requires networking Jul 2 01:49:18.489434 ignition[893]: Ignition finished successfully Jul 2 01:49:18.525475 ignition[900]: Ignition 2.14.0 Jul 2 01:49:18.525481 ignition[900]: Stage: fetch Jul 2 01:49:18.525585 ignition[900]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:18.525607 ignition[900]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:18.560740 ignition[900]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:18.560895 ignition[900]: parsed url from cmdline: "" Jul 2 01:49:18.560899 ignition[900]: no config URL provided Jul 2 01:49:18.560907 ignition[900]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 01:49:18.560927 ignition[900]: no config at "/usr/lib/ignition/user.ign" Jul 2 01:49:18.560957 ignition[900]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Jul 2 01:49:18.653227 ignition[900]: GET result: OK Jul 2 01:49:18.653332 ignition[900]: config has been read from IMDS userdata Jul 2 01:49:18.653378 ignition[900]: parsing config with SHA512: 166705831779044dd9f9bb03444496e8c235d78745d4f6b036d65a4fe3f5944b3f80ccf89b060393e709d1222f099c76095468b7864efc9bf5e9889c5dcd5fe9 Jul 2 01:49:18.656484 unknown[900]: fetched base config from "system" Jul 2 01:49:18.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.657062 ignition[900]: fetch: fetch complete Jul 2 01:49:18.688983 kernel: audit: type=1130 audit(1719884958.665:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.656503 unknown[900]: fetched base config from "system" Jul 2 01:49:18.657067 ignition[900]: fetch: fetch passed Jul 2 01:49:18.656509 unknown[900]: fetched user config from "azure" Jul 2 01:49:18.657114 ignition[900]: Ignition finished successfully Jul 2 01:49:18.661605 systemd[1]: Finished ignition-fetch.service. Jul 2 01:49:18.696976 ignition[906]: Ignition 2.14.0 Jul 2 01:49:18.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.666731 systemd[1]: Starting ignition-kargs.service... Jul 2 01:49:18.744070 kernel: audit: type=1130 audit(1719884958.716:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.696982 ignition[906]: Stage: kargs Jul 2 01:49:18.713105 systemd[1]: Finished ignition-kargs.service. Jul 2 01:49:18.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.697121 ignition[906]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:18.782718 kernel: audit: type=1130 audit(1719884958.757:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.735898 systemd[1]: Starting ignition-disks.service... Jul 2 01:49:18.697147 ignition[906]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:18.753392 systemd[1]: Finished ignition-disks.service. Jul 2 01:49:18.700586 ignition[906]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:18.757599 systemd[1]: Reached target initrd-root-device.target. Jul 2 01:49:18.708735 ignition[906]: kargs: kargs passed Jul 2 01:49:18.778051 systemd[1]: Reached target local-fs-pre.target. Jul 2 01:49:18.708782 ignition[906]: Ignition finished successfully Jul 2 01:49:18.786885 systemd[1]: Reached target local-fs.target. Jul 2 01:49:18.743520 ignition[912]: Ignition 2.14.0 Jul 2 01:49:18.795163 systemd[1]: Reached target sysinit.target. Jul 2 01:49:18.743526 ignition[912]: Stage: disks Jul 2 01:49:18.802784 systemd[1]: Reached target basic.target. Jul 2 01:49:18.743640 ignition[912]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:18.812956 systemd[1]: Starting systemd-fsck-root.service... Jul 2 01:49:18.743658 ignition[912]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:18.746284 ignition[912]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:18.748868 ignition[912]: disks: disks passed Jul 2 01:49:18.748947 ignition[912]: Ignition finished successfully Jul 2 01:49:18.915703 systemd-fsck[920]: ROOT: clean, 614/7326000 files, 481075/7359488 blocks Jul 2 01:49:18.928887 systemd[1]: Finished systemd-fsck-root.service. Jul 2 01:49:18.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.953831 systemd[1]: Mounting sysroot.mount... Jul 2 01:49:18.961930 kernel: audit: type=1130 audit(1719884958.932:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:18.974060 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 01:49:18.974649 systemd[1]: Mounted sysroot.mount. Jul 2 01:49:18.978305 systemd[1]: Reached target initrd-root-fs.target. Jul 2 01:49:19.016167 systemd[1]: Mounting sysroot-usr.mount... Jul 2 01:49:19.021081 systemd[1]: Starting flatcar-metadata-hostname.service... Jul 2 01:49:19.029193 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 01:49:19.029228 systemd[1]: Reached target ignition-diskful.target. Jul 2 01:49:19.035392 systemd[1]: Mounted sysroot-usr.mount. Jul 2 01:49:19.087363 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 01:49:19.092934 systemd[1]: Starting initrd-setup-root.service... Jul 2 01:49:19.116934 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (931) Jul 2 01:49:19.124073 initrd-setup-root[936]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 01:49:19.135333 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Jul 2 01:49:19.135489 kernel: BTRFS info (device sda6): using free space tree Jul 2 01:49:19.135504 kernel: BTRFS info (device sda6): has skinny extents Jul 2 01:49:19.143805 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 01:49:19.155780 initrd-setup-root[962]: cut: /sysroot/etc/group: No such file or directory Jul 2 01:49:19.179403 initrd-setup-root[970]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 01:49:19.188367 initrd-setup-root[978]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 01:49:19.632269 systemd[1]: Finished initrd-setup-root.service. Jul 2 01:49:19.661015 kernel: audit: type=1130 audit(1719884959.636:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.638019 systemd[1]: Starting ignition-mount.service... Jul 2 01:49:19.662622 systemd[1]: Starting sysroot-boot.service... Jul 2 01:49:19.672761 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 01:49:19.672888 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 01:49:19.702126 systemd[1]: Finished sysroot-boot.service. Jul 2 01:49:19.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.728931 kernel: audit: type=1130 audit(1719884959.706:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.743699 ignition[1000]: INFO : Ignition 2.14.0 Jul 2 01:49:19.743699 ignition[1000]: INFO : Stage: mount Jul 2 01:49:19.777031 kernel: audit: type=1130 audit(1719884959.756:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:19.777098 ignition[1000]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:19.777098 ignition[1000]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:19.777098 ignition[1000]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:19.777098 ignition[1000]: INFO : mount: mount passed Jul 2 01:49:19.777098 ignition[1000]: INFO : Ignition finished successfully Jul 2 01:49:19.751731 systemd[1]: Finished ignition-mount.service. Jul 2 01:49:20.387801 coreos-metadata[930]: Jul 02 01:49:20.387 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Jul 2 01:49:20.397131 coreos-metadata[930]: Jul 02 01:49:20.397 INFO Fetch successful Jul 2 01:49:20.432034 coreos-metadata[930]: Jul 02 01:49:20.431 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Jul 2 01:49:20.445135 coreos-metadata[930]: Jul 02 01:49:20.445 INFO Fetch successful Jul 2 01:49:20.460853 coreos-metadata[930]: Jul 02 01:49:20.460 INFO wrote hostname ci-3510.3.5-a-b4a22a1448 to /sysroot/etc/hostname Jul 2 01:49:20.469893 systemd[1]: Finished flatcar-metadata-hostname.service. Jul 2 01:49:20.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:20.476329 systemd[1]: Starting ignition-files.service... Jul 2 01:49:20.507729 kernel: audit: type=1130 audit(1719884960.475:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:20.510155 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 01:49:20.528933 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (1010) Jul 2 01:49:20.541555 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Jul 2 01:49:20.541611 kernel: BTRFS info (device sda6): using free space tree Jul 2 01:49:20.541622 kernel: BTRFS info (device sda6): has skinny extents Jul 2 01:49:20.552321 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 01:49:20.569834 ignition[1029]: INFO : Ignition 2.14.0 Jul 2 01:49:20.569834 ignition[1029]: INFO : Stage: files Jul 2 01:49:20.580087 ignition[1029]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:20.580087 ignition[1029]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:20.580087 ignition[1029]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:20.580087 ignition[1029]: DEBUG : files: compiled without relabeling support, skipping Jul 2 01:49:20.580087 ignition[1029]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 01:49:20.580087 ignition[1029]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 01:49:20.647336 ignition[1029]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 01:49:20.656027 ignition[1029]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 01:49:20.670348 unknown[1029]: wrote ssh authorized keys file for user: core Jul 2 01:49:20.677537 ignition[1029]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 01:49:20.677537 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 2 01:49:20.677537 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 2 01:49:21.170659 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 01:49:21.400946 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 01:49:21.509723 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1034) Jul 2 01:49:21.447365 systemd[1]: mnt-oem364060158.mount: Deactivated successfully. Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-arm64.raw" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-arm64.raw" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem364060158" Jul 2 01:49:21.515306 ignition[1029]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem364060158": device or resource busy Jul 2 01:49:21.515306 ignition[1029]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem364060158", trying btrfs: device or resource busy Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem364060158" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem364060158" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem364060158" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem364060158" Jul 2 01:49:21.515306 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem226527139" Jul 2 01:49:21.685480 ignition[1029]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem226527139": device or resource busy Jul 2 01:49:21.685480 ignition[1029]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem226527139", trying btrfs: device or resource busy Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem226527139" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem226527139" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem226527139" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem226527139" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-arm64.raw" Jul 2 01:49:21.685480 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.29.2-arm64.raw: attempt #1 Jul 2 01:49:21.993729 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Jul 2 01:49:22.220372 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-arm64.raw" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(13): [started] processing unit "waagent.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(13): [finished] processing unit "waagent.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(14): [started] processing unit "nvidia.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(14): [finished] processing unit "nvidia.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 01:49:22.234262 ignition[1029]: INFO : files: files passed Jul 2 01:49:22.234262 ignition[1029]: INFO : Ignition finished successfully Jul 2 01:49:22.429821 kernel: audit: type=1130 audit(1719884962.244:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.234325 systemd[1]: Finished ignition-files.service. Jul 2 01:49:22.267281 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 01:49:22.440252 initrd-setup-root-after-ignition[1054]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 01:49:22.278851 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 01:49:22.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.284800 systemd[1]: Starting ignition-quench.service... Jul 2 01:49:22.296784 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 01:49:22.296886 systemd[1]: Finished ignition-quench.service. Jul 2 01:49:22.328953 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 01:49:22.341428 systemd[1]: Reached target ignition-complete.target. Jul 2 01:49:22.353381 systemd[1]: Starting initrd-parse-etc.service... Jul 2 01:49:22.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.375356 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 01:49:22.375473 systemd[1]: Finished initrd-parse-etc.service. Jul 2 01:49:22.383599 systemd[1]: Reached target initrd-fs.target. Jul 2 01:49:22.394888 systemd[1]: Reached target initrd.target. Jul 2 01:49:22.407739 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 01:49:22.408568 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 01:49:22.440439 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 01:49:22.452695 systemd[1]: Starting initrd-cleanup.service... Jul 2 01:49:22.472708 systemd[1]: Stopped target nss-lookup.target. Jul 2 01:49:22.479580 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 01:49:22.488263 systemd[1]: Stopped target timers.target. Jul 2 01:49:22.496870 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 01:49:22.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.496994 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 01:49:22.505195 systemd[1]: Stopped target initrd.target. Jul 2 01:49:22.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.512726 systemd[1]: Stopped target basic.target. Jul 2 01:49:22.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.521276 systemd[1]: Stopped target ignition-complete.target. Jul 2 01:49:22.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.529313 systemd[1]: Stopped target ignition-diskful.target. Jul 2 01:49:22.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.537648 systemd[1]: Stopped target initrd-root-device.target. Jul 2 01:49:22.545728 systemd[1]: Stopped target remote-fs.target. Jul 2 01:49:22.659390 ignition[1067]: INFO : Ignition 2.14.0 Jul 2 01:49:22.659390 ignition[1067]: INFO : Stage: umount Jul 2 01:49:22.659390 ignition[1067]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 01:49:22.659390 ignition[1067]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Jul 2 01:49:22.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.556565 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 01:49:22.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.711463 ignition[1067]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jul 2 01:49:22.711463 ignition[1067]: INFO : umount: umount passed Jul 2 01:49:22.711463 ignition[1067]: INFO : Ignition finished successfully Jul 2 01:49:22.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.564807 systemd[1]: Stopped target sysinit.target. Jul 2 01:49:22.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.572355 systemd[1]: Stopped target local-fs.target. Jul 2 01:49:22.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.580052 systemd[1]: Stopped target local-fs-pre.target. Jul 2 01:49:22.587706 systemd[1]: Stopped target swap.target. Jul 2 01:49:22.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.595679 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 01:49:22.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.595788 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 01:49:22.603232 systemd[1]: Stopped target cryptsetup.target. Jul 2 01:49:22.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.613339 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 01:49:22.613438 systemd[1]: Stopped dracut-initqueue.service. Jul 2 01:49:22.621322 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 01:49:22.621414 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 01:49:22.630071 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 01:49:22.630154 systemd[1]: Stopped ignition-files.service. Jul 2 01:49:22.637441 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Jul 2 01:49:22.637525 systemd[1]: Stopped flatcar-metadata-hostname.service. Jul 2 01:49:22.647403 systemd[1]: Stopping ignition-mount.service... Jul 2 01:49:22.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.665740 systemd[1]: Stopping iscsiuio.service... Jul 2 01:49:22.676869 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 01:49:22.677028 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 01:49:22.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.687992 systemd[1]: Stopping sysroot-boot.service... Jul 2 01:49:22.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.702534 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 01:49:22.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.914000 audit: BPF prog-id=6 op=UNLOAD Jul 2 01:49:22.702666 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 01:49:22.709278 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 01:49:22.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.709381 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 01:49:22.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.723988 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 01:49:22.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.724099 systemd[1]: Stopped iscsiuio.service. Jul 2 01:49:22.730049 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 01:49:22.730150 systemd[1]: Stopped ignition-mount.service. Jul 2 01:49:22.739281 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 01:49:22.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.739383 systemd[1]: Stopped ignition-disks.service. Jul 2 01:49:22.746887 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 01:49:22.747037 systemd[1]: Stopped ignition-kargs.service. Jul 2 01:49:23.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.762885 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 01:49:23.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.762990 systemd[1]: Stopped ignition-fetch.service. Jul 2 01:49:23.041338 kernel: hv_netvsc 002248b7-8c10-0022-48b7-8c10002248b7 eth0: Data path switched from VF: enP47905s1 Jul 2 01:49:23.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.770191 systemd[1]: Stopped target network.target. Jul 2 01:49:22.778901 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 01:49:22.779019 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 01:49:22.787231 systemd[1]: Stopped target paths.target. Jul 2 01:49:23.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.794795 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 01:49:23.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:23.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.805758 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 01:49:22.816474 systemd[1]: Stopped target slices.target. Jul 2 01:49:23.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:22.825418 systemd[1]: Stopped target sockets.target. Jul 2 01:49:22.835422 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 01:49:22.835496 systemd[1]: Closed iscsid.socket. Jul 2 01:49:22.843424 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 01:49:22.843502 systemd[1]: Closed iscsiuio.socket. Jul 2 01:49:22.857950 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 01:49:22.858045 systemd[1]: Stopped ignition-setup.service. Jul 2 01:49:22.869925 systemd[1]: Stopping systemd-networkd.service... Jul 2 01:49:22.878178 systemd[1]: Stopping systemd-resolved.service... Jul 2 01:49:22.885543 systemd-networkd[869]: eth0: DHCPv6 lease lost Jul 2 01:49:23.126000 audit: BPF prog-id=9 op=UNLOAD Jul 2 01:49:22.888126 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 01:49:22.888921 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 01:49:22.889015 systemd[1]: Stopped systemd-networkd.service. Jul 2 01:49:22.897759 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 01:49:22.897855 systemd[1]: Stopped systemd-resolved.service. Jul 2 01:49:22.906476 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 01:49:22.906568 systemd[1]: Finished initrd-cleanup.service. Jul 2 01:49:22.915842 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 01:49:22.915880 systemd[1]: Closed systemd-networkd.socket. Jul 2 01:49:22.925771 systemd[1]: Stopping network-cleanup.service... Jul 2 01:49:22.933795 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 01:49:22.933858 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 01:49:22.938908 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 01:49:22.938968 systemd[1]: Stopped systemd-sysctl.service. Jul 2 01:49:22.953253 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 01:49:22.953299 systemd[1]: Stopped systemd-modules-load.service. Jul 2 01:49:22.958599 systemd[1]: Stopping systemd-udevd.service... Jul 2 01:49:22.968950 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 01:49:22.977618 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 01:49:22.977787 systemd[1]: Stopped systemd-udevd.service. Jul 2 01:49:22.985666 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 01:49:22.985707 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 01:49:22.994338 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 01:49:22.994375 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 01:49:23.002659 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 01:49:23.002712 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 01:49:23.011834 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 01:49:23.011873 systemd[1]: Stopped dracut-cmdline.service. Jul 2 01:49:23.019966 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 01:49:23.020006 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 01:49:23.040854 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 01:49:23.055185 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 01:49:23.055255 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 01:49:23.063733 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 01:49:23.063836 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 01:49:23.077303 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 01:49:23.077402 systemd[1]: Stopped network-cleanup.service. Jul 2 01:49:23.515974 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 01:49:23.516088 systemd[1]: Stopped sysroot-boot.service. Jul 2 01:49:23.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:23.533756 systemd[1]: Reached target initrd-switch-root.target. Jul 2 01:49:23.559166 kernel: kauditd_printk_skb: 39 callbacks suppressed Jul 2 01:49:23.559188 kernel: audit: type=1131 audit(1719884963.524:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:23.555155 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 01:49:23.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:23.555225 systemd[1]: Stopped initrd-setup-root.service. Jul 2 01:49:23.592207 kernel: audit: type=1131 audit(1719884963.563:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:23.564262 systemd[1]: Starting initrd-switch-root.service... Jul 2 01:49:23.591721 systemd[1]: Switching root. Jul 2 01:49:23.615226 iscsid[878]: iscsid shutting down. Jul 2 01:49:23.618533 systemd-journald[275]: Received SIGTERM from PID 1 (systemd). Jul 2 01:49:23.618576 systemd-journald[275]: Journal stopped Jul 2 01:49:35.056092 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 01:49:35.056115 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 01:49:35.056126 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 01:49:35.056136 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 01:49:35.056144 kernel: SELinux: policy capability open_perms=1 Jul 2 01:49:35.056152 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 01:49:35.056161 kernel: SELinux: policy capability always_check_network=0 Jul 2 01:49:35.056170 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 01:49:35.056178 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 01:49:35.056186 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 01:49:35.056196 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 01:49:35.056204 kernel: audit: type=1403 audit(1719884966.185:80): auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 01:49:35.056214 systemd[1]: Successfully loaded SELinux policy in 270.775ms. Jul 2 01:49:35.056224 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 25.764ms. Jul 2 01:49:35.056235 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 01:49:35.056246 systemd[1]: Detected virtualization microsoft. Jul 2 01:49:35.056255 systemd[1]: Detected architecture arm64. Jul 2 01:49:35.056263 systemd[1]: Detected first boot. Jul 2 01:49:35.056273 systemd[1]: Hostname set to . Jul 2 01:49:35.056282 systemd[1]: Initializing machine ID from random generator. Jul 2 01:49:35.056292 kernel: audit: type=1400 audit(1719884966.865:81): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 01:49:35.056302 kernel: audit: type=1400 audit(1719884966.869:82): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 01:49:35.056313 kernel: audit: type=1334 audit(1719884966.883:83): prog-id=10 op=LOAD Jul 2 01:49:35.056322 kernel: audit: type=1334 audit(1719884966.883:84): prog-id=10 op=UNLOAD Jul 2 01:49:35.056330 kernel: audit: type=1334 audit(1719884966.898:85): prog-id=11 op=LOAD Jul 2 01:49:35.056339 kernel: audit: type=1334 audit(1719884966.898:86): prog-id=11 op=UNLOAD Jul 2 01:49:35.056348 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 01:49:35.056357 kernel: audit: type=1400 audit(1719884968.245:87): avc: denied { associate } for pid=1100 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 01:49:35.056368 systemd[1]: Populated /etc with preset unit settings. Jul 2 01:49:35.056378 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 01:49:35.056388 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 01:49:35.056398 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 01:49:35.056407 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 2 01:49:35.056416 kernel: audit: type=1334 audit(1719884974.308:89): prog-id=12 op=LOAD Jul 2 01:49:35.056424 kernel: audit: type=1334 audit(1719884974.308:90): prog-id=3 op=UNLOAD Jul 2 01:49:35.056433 kernel: audit: type=1334 audit(1719884974.308:91): prog-id=13 op=LOAD Jul 2 01:49:35.056443 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 01:49:35.056452 kernel: audit: type=1334 audit(1719884974.308:92): prog-id=14 op=LOAD Jul 2 01:49:35.056461 kernel: audit: type=1334 audit(1719884974.308:93): prog-id=4 op=UNLOAD Jul 2 01:49:35.056470 kernel: audit: type=1334 audit(1719884974.308:94): prog-id=5 op=UNLOAD Jul 2 01:49:35.056481 systemd[1]: Stopped iscsid.service. Jul 2 01:49:35.056490 kernel: audit: type=1334 audit(1719884974.314:95): prog-id=15 op=LOAD Jul 2 01:49:35.056499 kernel: audit: type=1334 audit(1719884974.314:96): prog-id=12 op=UNLOAD Jul 2 01:49:35.056509 kernel: audit: type=1334 audit(1719884974.319:97): prog-id=16 op=LOAD Jul 2 01:49:35.056518 kernel: audit: type=1334 audit(1719884974.324:98): prog-id=17 op=LOAD Jul 2 01:49:35.056527 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 01:49:35.056536 systemd[1]: Stopped initrd-switch-root.service. Jul 2 01:49:35.056546 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 01:49:35.056555 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 01:49:35.056565 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 01:49:35.056574 systemd[1]: Created slice system-getty.slice. Jul 2 01:49:35.056583 systemd[1]: Created slice system-modprobe.slice. Jul 2 01:49:35.056595 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 01:49:35.056605 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 01:49:35.056615 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 01:49:35.056625 systemd[1]: Created slice user.slice. Jul 2 01:49:35.056634 systemd[1]: Started systemd-ask-password-console.path. Jul 2 01:49:35.056643 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 01:49:35.056652 systemd[1]: Set up automount boot.automount. Jul 2 01:49:35.056662 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 01:49:35.056671 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 01:49:35.056682 systemd[1]: Stopped target initrd-fs.target. Jul 2 01:49:35.056692 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 01:49:35.056706 systemd[1]: Reached target integritysetup.target. Jul 2 01:49:35.056715 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 01:49:35.056725 systemd[1]: Reached target remote-fs.target. Jul 2 01:49:35.056734 systemd[1]: Reached target slices.target. Jul 2 01:49:35.056744 systemd[1]: Reached target swap.target. Jul 2 01:49:35.056753 systemd[1]: Reached target torcx.target. Jul 2 01:49:35.056764 systemd[1]: Reached target veritysetup.target. Jul 2 01:49:35.056773 systemd[1]: Listening on systemd-coredump.socket. Jul 2 01:49:35.056783 systemd[1]: Listening on systemd-initctl.socket. Jul 2 01:49:35.056793 systemd[1]: Listening on systemd-networkd.socket. Jul 2 01:49:35.056804 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 01:49:35.056813 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 01:49:35.056823 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 01:49:35.056832 systemd[1]: Mounting dev-hugepages.mount... Jul 2 01:49:35.056842 systemd[1]: Mounting dev-mqueue.mount... Jul 2 01:49:35.056852 systemd[1]: Mounting media.mount... Jul 2 01:49:35.056861 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 01:49:35.056871 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 01:49:35.056880 systemd[1]: Mounting tmp.mount... Jul 2 01:49:35.056891 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 01:49:35.056901 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 01:49:35.056923 systemd[1]: Starting kmod-static-nodes.service... Jul 2 01:49:35.056933 systemd[1]: Starting modprobe@configfs.service... Jul 2 01:49:35.056943 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 01:49:35.056952 systemd[1]: Starting modprobe@drm.service... Jul 2 01:49:35.056962 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 01:49:35.056971 systemd[1]: Starting modprobe@fuse.service... Jul 2 01:49:35.056981 systemd[1]: Starting modprobe@loop.service... Jul 2 01:49:35.056992 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 01:49:35.057002 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 01:49:35.057012 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 01:49:35.057027 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 01:49:35.057037 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 01:49:35.057046 systemd[1]: Stopped systemd-journald.service. Jul 2 01:49:35.057056 systemd[1]: systemd-journald.service: Consumed 2.932s CPU time. Jul 2 01:49:35.057065 systemd[1]: Starting systemd-journald.service... Jul 2 01:49:35.057074 kernel: fuse: init (API version 7.34) Jul 2 01:49:35.057085 kernel: loop: module loaded Jul 2 01:49:35.057094 systemd[1]: Starting systemd-modules-load.service... Jul 2 01:49:35.057104 systemd[1]: Starting systemd-network-generator.service... Jul 2 01:49:35.057113 systemd[1]: Starting systemd-remount-fs.service... Jul 2 01:49:35.057123 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 01:49:35.057134 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 01:49:35.057144 systemd[1]: Stopped verity-setup.service. Jul 2 01:49:35.057154 systemd[1]: Mounted dev-hugepages.mount. Jul 2 01:49:35.057163 systemd[1]: Mounted dev-mqueue.mount. Jul 2 01:49:35.057174 systemd[1]: Mounted media.mount. Jul 2 01:49:35.057183 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 01:49:35.057192 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 01:49:35.057202 systemd[1]: Mounted tmp.mount. Jul 2 01:49:35.057211 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 01:49:35.057220 systemd[1]: Finished kmod-static-nodes.service. Jul 2 01:49:35.057230 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 01:49:35.057239 systemd[1]: Finished modprobe@configfs.service. Jul 2 01:49:35.057253 systemd-journald[1207]: Journal started Jul 2 01:49:35.057296 systemd-journald[1207]: Runtime Journal (/run/log/journal/35213a153da2405ba9bebdd6c06de055) is 8.0M, max 78.6M, 70.6M free. Jul 2 01:49:26.185000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 01:49:26.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 01:49:26.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 01:49:26.883000 audit: BPF prog-id=10 op=LOAD Jul 2 01:49:26.883000 audit: BPF prog-id=10 op=UNLOAD Jul 2 01:49:26.898000 audit: BPF prog-id=11 op=LOAD Jul 2 01:49:26.898000 audit: BPF prog-id=11 op=UNLOAD Jul 2 01:49:28.245000 audit[1100]: AVC avc: denied { associate } for pid=1100 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 01:49:28.245000 audit[1100]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458b4 a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1083 pid=1100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:28.245000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 01:49:28.255000 audit[1100]: AVC avc: denied { associate } for pid=1100 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 01:49:28.255000 audit[1100]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145999 a2=1ed a3=0 items=2 ppid=1083 pid=1100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:28.255000 audit: CWD cwd="/" Jul 2 01:49:28.255000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:28.255000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:28.255000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 01:49:34.308000 audit: BPF prog-id=12 op=LOAD Jul 2 01:49:34.308000 audit: BPF prog-id=3 op=UNLOAD Jul 2 01:49:34.308000 audit: BPF prog-id=13 op=LOAD Jul 2 01:49:34.308000 audit: BPF prog-id=14 op=LOAD Jul 2 01:49:34.308000 audit: BPF prog-id=4 op=UNLOAD Jul 2 01:49:34.308000 audit: BPF prog-id=5 op=UNLOAD Jul 2 01:49:34.314000 audit: BPF prog-id=15 op=LOAD Jul 2 01:49:34.314000 audit: BPF prog-id=12 op=UNLOAD Jul 2 01:49:34.319000 audit: BPF prog-id=16 op=LOAD Jul 2 01:49:34.324000 audit: BPF prog-id=17 op=LOAD Jul 2 01:49:34.324000 audit: BPF prog-id=13 op=UNLOAD Jul 2 01:49:34.324000 audit: BPF prog-id=14 op=UNLOAD Jul 2 01:49:34.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.355000 audit: BPF prog-id=15 op=UNLOAD Jul 2 01:49:34.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:34.868000 audit: BPF prog-id=18 op=LOAD Jul 2 01:49:34.868000 audit: BPF prog-id=19 op=LOAD Jul 2 01:49:34.869000 audit: BPF prog-id=20 op=LOAD Jul 2 01:49:34.869000 audit: BPF prog-id=16 op=UNLOAD Jul 2 01:49:34.869000 audit: BPF prog-id=17 op=UNLOAD Jul 2 01:49:34.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.053000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 01:49:35.053000 audit[1207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff787a5e0 a2=4000 a3=1 items=0 ppid=1 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:35.053000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 01:49:28.150234 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 01:49:34.308365 systemd[1]: Queued start job for default target multi-user.target. Jul 2 01:49:28.165096 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 01:49:34.326467 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 01:49:28.165115 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 01:49:34.326852 systemd[1]: systemd-journald.service: Consumed 2.932s CPU time. Jul 2 01:49:28.165151 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 01:49:28.165161 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 01:49:28.165193 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 01:49:28.165205 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 01:49:28.165403 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 01:49:28.165436 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 01:49:28.165448 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 01:49:28.230943 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 01:49:28.231001 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 01:49:28.231023 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 01:49:28.231038 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 01:49:28.231059 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 01:49:28.231072 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 01:49:33.338165 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 01:49:33.338417 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 01:49:33.338514 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 01:49:33.338672 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 01:49:33.338720 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 01:49:33.338774 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2024-07-02T01:49:33Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 01:49:35.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.074365 systemd[1]: Started systemd-journald.service. Jul 2 01:49:35.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.075411 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 01:49:35.075687 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 01:49:35.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.081058 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 01:49:35.081264 systemd[1]: Finished modprobe@drm.service. Jul 2 01:49:35.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.086501 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 01:49:35.086696 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 01:49:35.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.092065 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 01:49:35.092260 systemd[1]: Finished modprobe@fuse.service. Jul 2 01:49:35.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.097323 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 01:49:35.097521 systemd[1]: Finished modprobe@loop.service. Jul 2 01:49:35.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.103143 systemd[1]: Finished systemd-modules-load.service. Jul 2 01:49:35.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.108652 systemd[1]: Finished systemd-network-generator.service. Jul 2 01:49:35.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.114652 systemd[1]: Finished systemd-remount-fs.service. Jul 2 01:49:35.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.120130 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 01:49:35.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.126174 systemd[1]: Reached target network-pre.target. Jul 2 01:49:35.132326 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 01:49:35.138459 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 01:49:35.143280 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 01:49:35.144994 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 01:49:35.150932 systemd[1]: Starting systemd-journal-flush.service... Jul 2 01:49:35.155897 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 01:49:35.157073 systemd[1]: Starting systemd-random-seed.service... Jul 2 01:49:35.161624 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 01:49:35.162678 systemd[1]: Starting systemd-sysctl.service... Jul 2 01:49:35.168219 systemd[1]: Starting systemd-sysusers.service... Jul 2 01:49:35.173729 systemd[1]: Starting systemd-udev-settle.service... Jul 2 01:49:35.180768 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 01:49:35.186459 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 01:49:35.196837 udevadm[1221]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 2 01:49:35.208138 systemd-journald[1207]: Time spent on flushing to /var/log/journal/35213a153da2405ba9bebdd6c06de055 is 16.877ms for 1088 entries. Jul 2 01:49:35.208138 systemd-journald[1207]: System Journal (/var/log/journal/35213a153da2405ba9bebdd6c06de055) is 8.0M, max 2.6G, 2.6G free. Jul 2 01:49:35.271561 systemd-journald[1207]: Received client request to flush runtime journal. Jul 2 01:49:35.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.236484 systemd[1]: Finished systemd-random-seed.service. Jul 2 01:49:35.241468 systemd[1]: Reached target first-boot-complete.target. Jul 2 01:49:35.258284 systemd[1]: Finished systemd-sysctl.service. Jul 2 01:49:35.272438 systemd[1]: Finished systemd-journal-flush.service. Jul 2 01:49:35.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:35.777966 systemd[1]: Finished systemd-sysusers.service. Jul 2 01:49:35.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:36.478072 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 01:49:36.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:36.482000 audit: BPF prog-id=21 op=LOAD Jul 2 01:49:36.482000 audit: BPF prog-id=22 op=LOAD Jul 2 01:49:36.482000 audit: BPF prog-id=7 op=UNLOAD Jul 2 01:49:36.482000 audit: BPF prog-id=8 op=UNLOAD Jul 2 01:49:36.484133 systemd[1]: Starting systemd-udevd.service... Jul 2 01:49:36.502096 systemd-udevd[1224]: Using default interface naming scheme 'v252'. Jul 2 01:49:36.825995 systemd[1]: Started systemd-udevd.service. Jul 2 01:49:36.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:36.835000 audit: BPF prog-id=23 op=LOAD Jul 2 01:49:36.836774 systemd[1]: Starting systemd-networkd.service... Jul 2 01:49:36.861249 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 2 01:49:36.900000 audit: BPF prog-id=24 op=LOAD Jul 2 01:49:36.900000 audit: BPF prog-id=25 op=LOAD Jul 2 01:49:36.900000 audit: BPF prog-id=26 op=LOAD Jul 2 01:49:36.901801 systemd[1]: Starting systemd-userdbd.service... Jul 2 01:49:36.930940 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 01:49:36.944000 audit[1228]: AVC avc: denied { confidentiality } for pid=1228 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 01:49:36.960230 kernel: hv_vmbus: registering driver hv_balloon Jul 2 01:49:36.960384 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Jul 2 01:49:36.960428 kernel: hv_balloon: Memory hot add disabled on ARM64 Jul 2 01:49:36.944000 audit[1228]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab23931fa0 a1=aa2c a2=ffff885324b0 a3=aaab23892010 items=12 ppid=1224 pid=1228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:36.944000 audit: CWD cwd="/" Jul 2 01:49:36.944000 audit: PATH item=0 name=(null) inode=7308 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=1 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=2 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=3 name=(null) inode=10601 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=4 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=5 name=(null) inode=10602 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=6 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=7 name=(null) inode=10603 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=8 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=9 name=(null) inode=10604 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=10 name=(null) inode=10600 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PATH item=11 name=(null) inode=10605 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:49:36.944000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 01:49:36.969628 systemd[1]: Started systemd-userdbd.service. Jul 2 01:49:36.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:36.978931 kernel: hv_vmbus: registering driver hyperv_fb Jul 2 01:49:36.978974 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Jul 2 01:49:36.989140 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Jul 2 01:49:36.997407 kernel: Console: switching to colour dummy device 80x25 Jul 2 01:49:37.000931 kernel: Console: switching to colour frame buffer device 128x48 Jul 2 01:49:37.019605 kernel: hv_utils: Registering HyperV Utility Driver Jul 2 01:49:37.019698 kernel: hv_vmbus: registering driver hv_utils Jul 2 01:49:37.020930 kernel: hv_utils: Heartbeat IC version 3.0 Jul 2 01:49:37.027186 kernel: hv_utils: Shutdown IC version 3.2 Jul 2 01:49:37.027955 kernel: hv_utils: TimeSync IC version 4.0 Jul 2 01:49:37.503497 systemd-networkd[1245]: lo: Link UP Jul 2 01:49:37.503509 systemd-networkd[1245]: lo: Gained carrier Jul 2 01:49:37.503895 systemd-networkd[1245]: Enumeration completed Jul 2 01:49:37.503992 systemd[1]: Started systemd-networkd.service. Jul 2 01:49:37.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:37.509860 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 01:49:37.534176 systemd-networkd[1245]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 01:49:37.537356 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1229) Jul 2 01:49:37.557959 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 01:49:37.565752 systemd[1]: Finished systemd-udev-settle.service. Jul 2 01:49:37.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:37.571577 systemd[1]: Starting lvm2-activation-early.service... Jul 2 01:49:37.588357 kernel: mlx5_core bb21:00:02.0 enP47905s1: Link up Jul 2 01:49:37.614345 kernel: hv_netvsc 002248b7-8c10-0022-48b7-8c10002248b7 eth0: Data path switched to VF: enP47905s1 Jul 2 01:49:37.615892 systemd-networkd[1245]: enP47905s1: Link UP Jul 2 01:49:37.616372 systemd-networkd[1245]: eth0: Link UP Jul 2 01:49:37.616437 systemd-networkd[1245]: eth0: Gained carrier Jul 2 01:49:37.624913 systemd-networkd[1245]: enP47905s1: Gained carrier Jul 2 01:49:37.637466 systemd-networkd[1245]: eth0: DHCPv4 address 10.200.20.39/24, gateway 10.200.20.1 acquired from 168.63.129.16 Jul 2 01:49:37.842401 lvm[1302]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 01:49:37.896271 systemd[1]: Finished lvm2-activation-early.service. Jul 2 01:49:37.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:37.901044 systemd[1]: Reached target cryptsetup.target. Jul 2 01:49:37.906228 systemd[1]: Starting lvm2-activation.service... Jul 2 01:49:37.910097 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 01:49:37.942265 systemd[1]: Finished lvm2-activation.service. Jul 2 01:49:37.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:37.946719 systemd[1]: Reached target local-fs-pre.target. Jul 2 01:49:37.951022 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 01:49:37.951052 systemd[1]: Reached target local-fs.target. Jul 2 01:49:37.955051 systemd[1]: Reached target machines.target. Jul 2 01:49:37.960512 systemd[1]: Starting ldconfig.service... Jul 2 01:49:37.980203 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 01:49:37.980287 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:37.981433 systemd[1]: Starting systemd-boot-update.service... Jul 2 01:49:37.986231 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 01:49:37.993637 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 01:49:37.999017 systemd[1]: Starting systemd-sysext.service... Jul 2 01:49:38.018896 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1305 (bootctl) Jul 2 01:49:38.020096 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 01:49:38.067263 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 01:49:38.106460 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 01:49:38.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.128312 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 01:49:38.129170 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 01:49:38.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.139487 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 01:49:38.139666 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 01:49:38.202356 kernel: loop0: detected capacity change from 0 to 194512 Jul 2 01:49:38.244673 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 01:49:38.265356 kernel: loop1: detected capacity change from 0 to 194512 Jul 2 01:49:38.270161 (sd-sysext)[1317]: Using extensions 'kubernetes'. Jul 2 01:49:38.271491 (sd-sysext)[1317]: Merged extensions into '/usr'. Jul 2 01:49:38.287459 systemd[1]: Mounting usr-share-oem.mount... Jul 2 01:49:38.291536 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.292964 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 01:49:38.297944 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 01:49:38.303048 systemd[1]: Starting modprobe@loop.service... Jul 2 01:49:38.306711 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.306835 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:38.309098 systemd[1]: Mounted usr-share-oem.mount. Jul 2 01:49:38.313400 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 01:49:38.313528 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 01:49:38.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.317890 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 01:49:38.318006 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 01:49:38.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.323002 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 01:49:38.323117 systemd[1]: Finished modprobe@loop.service. Jul 2 01:49:38.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.327871 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 01:49:38.327969 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.328901 systemd[1]: Finished systemd-sysext.service. Jul 2 01:49:38.333007 systemd-fsck[1313]: fsck.fat 4.2 (2021-01-31) Jul 2 01:49:38.333007 systemd-fsck[1313]: /dev/sda1: 236 files, 117047/258078 clusters Jul 2 01:49:38.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.335694 systemd[1]: Starting ensure-sysext.service... Jul 2 01:49:38.340846 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 01:49:38.348028 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 01:49:38.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.358196 systemd[1]: Mounting boot.mount... Jul 2 01:49:38.361637 systemd[1]: Reloading. Jul 2 01:49:38.409525 /usr/lib/systemd/system-generators/torcx-generator[1347]: time="2024-07-02T01:49:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 01:49:38.409552 /usr/lib/systemd/system-generators/torcx-generator[1347]: time="2024-07-02T01:49:38Z" level=info msg="torcx already run" Jul 2 01:49:38.488789 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 01:49:38.488808 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 01:49:38.504044 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 01:49:38.507574 systemd-tmpfiles[1324]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 01:49:38.568000 audit: BPF prog-id=27 op=LOAD Jul 2 01:49:38.568000 audit: BPF prog-id=24 op=UNLOAD Jul 2 01:49:38.568000 audit: BPF prog-id=28 op=LOAD Jul 2 01:49:38.568000 audit: BPF prog-id=29 op=LOAD Jul 2 01:49:38.568000 audit: BPF prog-id=25 op=UNLOAD Jul 2 01:49:38.568000 audit: BPF prog-id=26 op=UNLOAD Jul 2 01:49:38.570000 audit: BPF prog-id=30 op=LOAD Jul 2 01:49:38.570000 audit: BPF prog-id=31 op=LOAD Jul 2 01:49:38.570000 audit: BPF prog-id=21 op=UNLOAD Jul 2 01:49:38.570000 audit: BPF prog-id=22 op=UNLOAD Jul 2 01:49:38.570000 audit: BPF prog-id=32 op=LOAD Jul 2 01:49:38.570000 audit: BPF prog-id=23 op=UNLOAD Jul 2 01:49:38.571000 audit: BPF prog-id=33 op=LOAD Jul 2 01:49:38.571000 audit: BPF prog-id=18 op=UNLOAD Jul 2 01:49:38.571000 audit: BPF prog-id=34 op=LOAD Jul 2 01:49:38.571000 audit: BPF prog-id=35 op=LOAD Jul 2 01:49:38.571000 audit: BPF prog-id=19 op=UNLOAD Jul 2 01:49:38.571000 audit: BPF prog-id=20 op=UNLOAD Jul 2 01:49:38.575918 systemd[1]: Mounted boot.mount. Jul 2 01:49:38.582697 systemd-tmpfiles[1324]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 01:49:38.589557 systemd[1]: Finished systemd-boot-update.service. Jul 2 01:49:38.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.597466 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.598961 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 01:49:38.603994 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 01:49:38.609498 systemd[1]: Starting modprobe@loop.service... Jul 2 01:49:38.613324 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.613590 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:38.614473 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 01:49:38.614716 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 01:49:38.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.619712 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 01:49:38.619912 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 01:49:38.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.625133 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 01:49:38.625358 systemd[1]: Finished modprobe@loop.service. Jul 2 01:49:38.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.630983 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.632379 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 01:49:38.637502 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 01:49:38.642640 systemd[1]: Starting modprobe@loop.service... Jul 2 01:49:38.646516 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.646736 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:38.647637 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 01:49:38.647868 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 01:49:38.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.652526 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 01:49:38.652746 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 01:49:38.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.657913 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 01:49:38.658122 systemd[1]: Finished modprobe@loop.service. Jul 2 01:49:38.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.666161 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.667645 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 01:49:38.672814 systemd[1]: Starting modprobe@drm.service... Jul 2 01:49:38.677570 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 01:49:38.682681 systemd[1]: Starting modprobe@loop.service... Jul 2 01:49:38.686622 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.686847 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:38.687896 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 01:49:38.688130 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 01:49:38.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.692816 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 01:49:38.693021 systemd[1]: Finished modprobe@drm.service. Jul 2 01:49:38.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.697870 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 01:49:38.698088 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 01:49:38.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.703198 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 01:49:38.703509 systemd[1]: Finished modprobe@loop.service. Jul 2 01:49:38.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.708584 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 01:49:38.708750 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 01:49:38.709836 systemd[1]: Finished ensure-sysext.service. Jul 2 01:49:38.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:38.728811 systemd-tmpfiles[1324]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 01:49:38.929516 systemd-networkd[1245]: eth0: Gained IPv6LL Jul 2 01:49:38.932225 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 01:49:38.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.186984 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 01:49:39.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.193184 systemd[1]: Starting audit-rules.service... Jul 2 01:49:39.197842 systemd[1]: Starting clean-ca-certificates.service... Jul 2 01:49:39.203410 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 01:49:39.208000 audit: BPF prog-id=36 op=LOAD Jul 2 01:49:39.210303 systemd[1]: Starting systemd-resolved.service... Jul 2 01:49:39.213000 audit: BPF prog-id=37 op=LOAD Jul 2 01:49:39.215632 systemd[1]: Starting systemd-timesyncd.service... Jul 2 01:49:39.220290 systemd[1]: Starting systemd-update-utmp.service... Jul 2 01:49:39.291000 audit[1423]: SYSTEM_BOOT pid=1423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.295436 systemd[1]: Finished systemd-update-utmp.service. Jul 2 01:49:39.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.306665 systemd[1]: Started systemd-timesyncd.service. Jul 2 01:49:39.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.311094 systemd[1]: Reached target time-set.target. Jul 2 01:49:39.321660 systemd[1]: Finished clean-ca-certificates.service. Jul 2 01:49:39.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.327738 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 01:49:39.389760 systemd-resolved[1421]: Positive Trust Anchors: Jul 2 01:49:39.389773 systemd-resolved[1421]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 01:49:39.389801 systemd-resolved[1421]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 01:49:39.393504 systemd-resolved[1421]: Using system hostname 'ci-3510.3.5-a-b4a22a1448'. Jul 2 01:49:39.394857 systemd[1]: Started systemd-resolved.service. Jul 2 01:49:39.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.399448 systemd[1]: Reached target network.target. Jul 2 01:49:39.403668 systemd[1]: Reached target network-online.target. Jul 2 01:49:39.408692 systemd[1]: Reached target nss-lookup.target. Jul 2 01:49:39.433398 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 01:49:39.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:49:39.563122 systemd-timesyncd[1422]: Contacted time server 209.38.132.42:123 (0.flatcar.pool.ntp.org). Jul 2 01:49:39.563198 systemd-timesyncd[1422]: Initial clock synchronization to Tue 2024-07-02 01:49:39.560028 UTC. Jul 2 01:49:39.626000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 01:49:39.631550 kernel: kauditd_printk_skb: 134 callbacks suppressed Jul 2 01:49:39.631624 kernel: audit: type=1305 audit(1719884979.626:216): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 01:49:39.626000 audit[1439]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe6d46de0 a2=420 a3=0 items=0 ppid=1418 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:39.662940 kernel: audit: type=1300 audit(1719884979.626:216): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe6d46de0 a2=420 a3=0 items=0 ppid=1418 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:49:39.663182 augenrules[1439]: No rules Jul 2 01:49:39.626000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 01:49:39.673350 kernel: audit: type=1327 audit(1719884979.626:216): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 01:49:39.673711 systemd[1]: Finished audit-rules.service. Jul 2 01:49:46.525860 ldconfig[1304]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 01:49:46.571753 systemd[1]: Finished ldconfig.service. Jul 2 01:49:46.577712 systemd[1]: Starting systemd-update-done.service... Jul 2 01:49:46.602624 systemd[1]: Finished systemd-update-done.service. Jul 2 01:49:46.607536 systemd[1]: Reached target sysinit.target. Jul 2 01:49:46.612051 systemd[1]: Started motdgen.path. Jul 2 01:49:46.616134 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 01:49:46.622498 systemd[1]: Started logrotate.timer. Jul 2 01:49:46.626155 systemd[1]: Started mdadm.timer. Jul 2 01:49:46.629521 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 01:49:46.633994 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 01:49:46.634026 systemd[1]: Reached target paths.target. Jul 2 01:49:46.637790 systemd[1]: Reached target timers.target. Jul 2 01:49:46.642176 systemd[1]: Listening on dbus.socket. Jul 2 01:49:46.647085 systemd[1]: Starting docker.socket... Jul 2 01:49:46.652468 systemd[1]: Listening on sshd.socket. Jul 2 01:49:46.656207 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:46.656680 systemd[1]: Listening on docker.socket. Jul 2 01:49:46.660706 systemd[1]: Reached target sockets.target. Jul 2 01:49:46.664685 systemd[1]: Reached target basic.target. Jul 2 01:49:46.668465 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 01:49:46.668494 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 01:49:46.669463 systemd[1]: Starting containerd.service... Jul 2 01:49:46.673801 systemd[1]: Starting dbus.service... Jul 2 01:49:46.677857 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 01:49:46.683319 systemd[1]: Starting extend-filesystems.service... Jul 2 01:49:46.689665 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 01:49:46.742811 systemd[1]: Starting kubelet.service... Jul 2 01:49:46.747741 systemd[1]: Starting motdgen.service... Jul 2 01:49:46.752035 systemd[1]: Started nvidia.service. Jul 2 01:49:46.757187 systemd[1]: Starting prepare-helm.service... Jul 2 01:49:46.761757 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 01:49:46.767666 systemd[1]: Starting sshd-keygen.service... Jul 2 01:49:46.774380 systemd[1]: Starting systemd-logind.service... Jul 2 01:49:46.778252 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 01:49:46.778309 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 01:49:46.778721 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 01:49:46.779943 systemd[1]: Starting update-engine.service... Jul 2 01:49:46.782863 jq[1449]: false Jul 2 01:49:46.787380 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 01:49:46.789861 jq[1467]: true Jul 2 01:49:46.797178 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 01:49:46.799297 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 01:49:46.805162 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 01:49:46.805311 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 01:49:46.810129 extend-filesystems[1450]: Found loop1 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda1 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda2 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda3 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found usr Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda4 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda6 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda7 Jul 2 01:49:46.817183 extend-filesystems[1450]: Found sda9 Jul 2 01:49:46.817183 extend-filesystems[1450]: Checking size of /dev/sda9 Jul 2 01:49:46.875074 jq[1471]: true Jul 2 01:49:46.842271 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 01:49:46.842464 systemd[1]: Finished motdgen.service. Jul 2 01:49:46.876222 systemd-logind[1463]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 2 01:49:46.876482 systemd-logind[1463]: New seat seat0. Jul 2 01:49:46.910840 extend-filesystems[1450]: Old size kept for /dev/sda9 Jul 2 01:49:46.921959 extend-filesystems[1450]: Found sr0 Jul 2 01:49:46.916414 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 01:49:46.916586 systemd[1]: Finished extend-filesystems.service. Jul 2 01:49:46.960646 tar[1470]: linux-arm64/helm Jul 2 01:49:47.037816 env[1474]: time="2024-07-02T01:49:47.037725450Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 01:49:47.066312 bash[1500]: Updated "/home/core/.ssh/authorized_keys" Jul 2 01:49:47.067446 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 01:49:47.094153 env[1474]: time="2024-07-02T01:49:47.094099289Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 01:49:47.094296 env[1474]: time="2024-07-02T01:49:47.094254591Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097626916Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097661232Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097879007Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097894565Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097907523Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097917922Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.097982994Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.098175172Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.098283519Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 01:49:47.098369 env[1474]: time="2024-07-02T01:49:47.098297078Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 01:49:47.098628 env[1474]: time="2024-07-02T01:49:47.098373349Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 01:49:47.098628 env[1474]: time="2024-07-02T01:49:47.098386907Z" level=info msg="metadata content store policy set" policy=shared Jul 2 01:49:47.110970 dbus-daemon[1448]: [system] SELinux support is enabled Jul 2 01:49:47.111130 systemd[1]: Started dbus.service. Jul 2 01:49:47.116688 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 01:49:47.116712 systemd[1]: Reached target system-config.target. Jul 2 01:49:47.122425 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 01:49:47.122445 systemd[1]: Reached target user-config.target. Jul 2 01:49:47.132438 systemd[1]: Started systemd-logind.service. Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137130131Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137195243Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137209081Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137244357Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137259876Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137273274Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137306 env[1474]: time="2024-07-02T01:49:47.137286192Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137680666Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137709303Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137724141Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137737100Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137750018Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137889122Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 01:49:47.137964 env[1474]: time="2024-07-02T01:49:47.137961793Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 01:49:47.138211 env[1474]: time="2024-07-02T01:49:47.138186087Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 01:49:47.138254 env[1474]: time="2024-07-02T01:49:47.138218763Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138254 env[1474]: time="2024-07-02T01:49:47.138234521Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 01:49:47.138296 env[1474]: time="2024-07-02T01:49:47.138279676Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138296 env[1474]: time="2024-07-02T01:49:47.138292275Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138347 env[1474]: time="2024-07-02T01:49:47.138304873Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138347 env[1474]: time="2024-07-02T01:49:47.138316952Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138347 env[1474]: time="2024-07-02T01:49:47.138342989Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138412 env[1474]: time="2024-07-02T01:49:47.138358227Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138412 env[1474]: time="2024-07-02T01:49:47.138369786Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138412 env[1474]: time="2024-07-02T01:49:47.138381864Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138412 env[1474]: time="2024-07-02T01:49:47.138395223Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 01:49:47.138529 env[1474]: time="2024-07-02T01:49:47.138506290Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138561 env[1474]: time="2024-07-02T01:49:47.138529087Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138561 env[1474]: time="2024-07-02T01:49:47.138542525Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138561 env[1474]: time="2024-07-02T01:49:47.138558243Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 01:49:47.138638 env[1474]: time="2024-07-02T01:49:47.138573402Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 01:49:47.138638 env[1474]: time="2024-07-02T01:49:47.138586280Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 01:49:47.138638 env[1474]: time="2024-07-02T01:49:47.138603758Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 01:49:47.138638 env[1474]: time="2024-07-02T01:49:47.138636874Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 01:49:47.138900 env[1474]: time="2024-07-02T01:49:47.138838331Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 01:49:47.138900 env[1474]: time="2024-07-02T01:49:47.138891284Z" level=info msg="Connect containerd service" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.138925201Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141386912Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141510018Z" level=info msg="Start subscribing containerd event" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141553453Z" level=info msg="Start recovering state" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141623405Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141625204Z" level=info msg="Start event monitor" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141658720Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141661760Z" level=info msg="Start snapshots syncer" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141673439Z" level=info msg="Start cni network conf syncer for default" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141681398Z" level=info msg="Start streaming server" Jul 2 01:49:47.155631 env[1474]: time="2024-07-02T01:49:47.141709994Z" level=info msg="containerd successfully booted in 0.104728s" Jul 2 01:49:47.141782 systemd[1]: Started containerd.service. Jul 2 01:49:47.186435 systemd[1]: nvidia.service: Deactivated successfully. Jul 2 01:49:47.550090 update_engine[1465]: I0702 01:49:47.536298 1465 main.cc:92] Flatcar Update Engine starting Jul 2 01:49:47.596873 systemd[1]: Started update-engine.service. Jul 2 01:49:47.604698 update_engine[1465]: I0702 01:49:47.603917 1465 update_check_scheduler.cc:74] Next update check in 7m15s Jul 2 01:49:47.604222 systemd[1]: Started locksmithd.service. Jul 2 01:49:47.731966 tar[1470]: linux-arm64/LICENSE Jul 2 01:49:47.731966 tar[1470]: linux-arm64/README.md Jul 2 01:49:47.741798 systemd[1]: Finished prepare-helm.service. Jul 2 01:49:47.802263 systemd[1]: Started kubelet.service. Jul 2 01:49:48.329734 kubelet[1554]: E0702 01:49:48.329664 1554 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:49:48.331680 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:49:48.331801 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:49:48.517296 sshd_keygen[1466]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 01:49:48.534980 systemd[1]: Finished sshd-keygen.service. Jul 2 01:49:48.541024 systemd[1]: Starting issuegen.service... Jul 2 01:49:48.546963 systemd[1]: Started waagent.service. Jul 2 01:49:48.551617 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 01:49:48.551776 systemd[1]: Finished issuegen.service. Jul 2 01:49:48.557993 systemd[1]: Starting systemd-user-sessions.service... Jul 2 01:49:48.592047 systemd[1]: Finished systemd-user-sessions.service. Jul 2 01:49:48.598884 systemd[1]: Started getty@tty1.service. Jul 2 01:49:48.604863 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 2 01:49:48.610222 systemd[1]: Reached target getty.target. Jul 2 01:49:48.614554 systemd[1]: Reached target multi-user.target. Jul 2 01:49:48.626131 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 01:49:48.634835 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 01:49:48.635005 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 01:49:48.640957 systemd[1]: Startup finished in 738ms (kernel) + 14.093s (initrd) + 22.686s (userspace) = 37.518s. Jul 2 01:49:49.025521 locksmithd[1550]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 01:49:49.237215 login[1576]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Jul 2 01:49:49.285141 login[1577]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 2 01:49:49.324275 systemd[1]: Created slice user-500.slice. Jul 2 01:49:49.325466 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 01:49:49.327746 systemd-logind[1463]: New session 2 of user core. Jul 2 01:49:49.351537 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 01:49:49.352956 systemd[1]: Starting user@500.service... Jul 2 01:49:49.383158 (systemd)[1581]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:49:49.550579 systemd[1581]: Queued start job for default target default.target. Jul 2 01:49:49.551072 systemd[1581]: Reached target paths.target. Jul 2 01:49:49.551093 systemd[1581]: Reached target sockets.target. Jul 2 01:49:49.551103 systemd[1581]: Reached target timers.target. Jul 2 01:49:49.551113 systemd[1581]: Reached target basic.target. Jul 2 01:49:49.551153 systemd[1581]: Reached target default.target. Jul 2 01:49:49.551176 systemd[1581]: Startup finished in 161ms. Jul 2 01:49:49.551219 systemd[1]: Started user@500.service. Jul 2 01:49:49.552133 systemd[1]: Started session-2.scope. Jul 2 01:49:50.237871 login[1576]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 2 01:49:50.241756 systemd-logind[1463]: New session 1 of user core. Jul 2 01:49:50.242123 systemd[1]: Started session-1.scope. Jul 2 01:49:55.133161 waagent[1574]: 2024-07-02T01:49:55.133036Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Jul 2 01:49:55.140172 waagent[1574]: 2024-07-02T01:49:55.140089Z INFO Daemon Daemon OS: flatcar 3510.3.5 Jul 2 01:49:55.144766 waagent[1574]: 2024-07-02T01:49:55.144699Z INFO Daemon Daemon Python: 3.9.16 Jul 2 01:49:55.149313 waagent[1574]: 2024-07-02T01:49:55.149242Z INFO Daemon Daemon Run daemon Jul 2 01:49:55.154248 waagent[1574]: 2024-07-02T01:49:55.154013Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.5' Jul 2 01:49:55.176593 waagent[1574]: 2024-07-02T01:49:55.175397Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Jul 2 01:49:55.191997 waagent[1574]: 2024-07-02T01:49:55.191859Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Jul 2 01:49:55.202977 waagent[1574]: 2024-07-02T01:49:55.202903Z INFO Daemon Daemon cloud-init is enabled: False Jul 2 01:49:55.208718 waagent[1574]: 2024-07-02T01:49:55.208651Z INFO Daemon Daemon Using waagent for provisioning Jul 2 01:49:55.214809 waagent[1574]: 2024-07-02T01:49:55.214745Z INFO Daemon Daemon Activate resource disk Jul 2 01:49:55.220185 waagent[1574]: 2024-07-02T01:49:55.220125Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Jul 2 01:49:55.235249 waagent[1574]: 2024-07-02T01:49:55.235184Z INFO Daemon Daemon Found device: None Jul 2 01:49:55.240103 waagent[1574]: 2024-07-02T01:49:55.240040Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Jul 2 01:49:55.248853 waagent[1574]: 2024-07-02T01:49:55.248792Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Jul 2 01:49:55.260271 waagent[1574]: 2024-07-02T01:49:55.260209Z INFO Daemon Daemon Clean protocol and wireserver endpoint Jul 2 01:49:55.266703 waagent[1574]: 2024-07-02T01:49:55.266641Z INFO Daemon Daemon Running default provisioning handler Jul 2 01:49:55.280600 waagent[1574]: 2024-07-02T01:49:55.280469Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Jul 2 01:49:55.296441 waagent[1574]: 2024-07-02T01:49:55.296278Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Jul 2 01:49:55.306120 waagent[1574]: 2024-07-02T01:49:55.306052Z INFO Daemon Daemon cloud-init is enabled: False Jul 2 01:49:55.311338 waagent[1574]: 2024-07-02T01:49:55.311268Z INFO Daemon Daemon Copying ovf-env.xml Jul 2 01:49:55.371281 waagent[1574]: 2024-07-02T01:49:55.371136Z INFO Daemon Daemon Successfully mounted dvd Jul 2 01:49:55.434437 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Jul 2 01:49:55.468743 waagent[1574]: 2024-07-02T01:49:55.468591Z INFO Daemon Daemon Detect protocol endpoint Jul 2 01:49:55.474409 waagent[1574]: 2024-07-02T01:49:55.474313Z INFO Daemon Daemon Clean protocol and wireserver endpoint Jul 2 01:49:55.480083 waagent[1574]: 2024-07-02T01:49:55.480014Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Jul 2 01:49:55.487085 waagent[1574]: 2024-07-02T01:49:55.487016Z INFO Daemon Daemon Test for route to 168.63.129.16 Jul 2 01:49:55.492560 waagent[1574]: 2024-07-02T01:49:55.492494Z INFO Daemon Daemon Route to 168.63.129.16 exists Jul 2 01:49:55.497587 waagent[1574]: 2024-07-02T01:49:55.497521Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Jul 2 01:49:55.608174 waagent[1574]: 2024-07-02T01:49:55.608104Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Jul 2 01:49:55.616111 waagent[1574]: 2024-07-02T01:49:55.616065Z INFO Daemon Daemon Wire protocol version:2012-11-30 Jul 2 01:49:55.621931 waagent[1574]: 2024-07-02T01:49:55.621875Z INFO Daemon Daemon Server preferred version:2015-04-05 Jul 2 01:49:56.305022 waagent[1574]: 2024-07-02T01:49:56.304875Z INFO Daemon Daemon Initializing goal state during protocol detection Jul 2 01:49:56.319698 waagent[1574]: 2024-07-02T01:49:56.319631Z INFO Daemon Daemon Forcing an update of the goal state.. Jul 2 01:49:56.325791 waagent[1574]: 2024-07-02T01:49:56.325729Z INFO Daemon Daemon Fetching goal state [incarnation 1] Jul 2 01:49:56.398065 waagent[1574]: 2024-07-02T01:49:56.397931Z INFO Daemon Daemon Found private key matching thumbprint 7BB49B77886E69ECFE71A87ABD537418BE933108 Jul 2 01:49:56.406242 waagent[1574]: 2024-07-02T01:49:56.406176Z INFO Daemon Daemon Certificate with thumbprint 9D146C54DABB735A36F0B1A0AA773212C5F1DD0C has no matching private key. Jul 2 01:49:56.415894 waagent[1574]: 2024-07-02T01:49:56.415829Z INFO Daemon Daemon Fetch goal state completed Jul 2 01:49:56.465800 waagent[1574]: 2024-07-02T01:49:56.465745Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: c21b3f7c-0aa5-4c55-9521-cbfe15424059 New eTag: 15523973600231752189] Jul 2 01:49:56.476165 waagent[1574]: 2024-07-02T01:49:56.476098Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Jul 2 01:49:56.491054 waagent[1574]: 2024-07-02T01:49:56.490996Z INFO Daemon Daemon Starting provisioning Jul 2 01:49:56.496225 waagent[1574]: 2024-07-02T01:49:56.496165Z INFO Daemon Daemon Handle ovf-env.xml. Jul 2 01:49:56.502875 waagent[1574]: 2024-07-02T01:49:56.502811Z INFO Daemon Daemon Set hostname [ci-3510.3.5-a-b4a22a1448] Jul 2 01:49:56.557184 waagent[1574]: 2024-07-02T01:49:56.557051Z INFO Daemon Daemon Publish hostname [ci-3510.3.5-a-b4a22a1448] Jul 2 01:49:56.564364 waagent[1574]: 2024-07-02T01:49:56.564259Z INFO Daemon Daemon Examine /proc/net/route for primary interface Jul 2 01:49:56.570931 waagent[1574]: 2024-07-02T01:49:56.570865Z INFO Daemon Daemon Primary interface is [eth0] Jul 2 01:49:56.587012 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Jul 2 01:49:56.587172 systemd[1]: Stopped systemd-networkd-wait-online.service. Jul 2 01:49:56.587224 systemd[1]: Stopping systemd-networkd-wait-online.service... Jul 2 01:49:56.587470 systemd[1]: Stopping systemd-networkd.service... Jul 2 01:49:56.592378 systemd-networkd[1245]: eth0: DHCPv6 lease lost Jul 2 01:49:56.593645 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 01:49:56.593813 systemd[1]: Stopped systemd-networkd.service. Jul 2 01:49:56.595665 systemd[1]: Starting systemd-networkd.service... Jul 2 01:49:56.623633 systemd-networkd[1625]: enP47905s1: Link UP Jul 2 01:49:56.623645 systemd-networkd[1625]: enP47905s1: Gained carrier Jul 2 01:49:56.624570 systemd-networkd[1625]: eth0: Link UP Jul 2 01:49:56.624579 systemd-networkd[1625]: eth0: Gained carrier Jul 2 01:49:56.624897 systemd-networkd[1625]: lo: Link UP Jul 2 01:49:56.624907 systemd-networkd[1625]: lo: Gained carrier Jul 2 01:49:56.625131 systemd-networkd[1625]: eth0: Gained IPv6LL Jul 2 01:49:56.625559 systemd-networkd[1625]: Enumeration completed Jul 2 01:49:56.625653 systemd[1]: Started systemd-networkd.service. Jul 2 01:49:56.631378 waagent[1574]: 2024-07-02T01:49:56.628591Z INFO Daemon Daemon Create user account if not exists Jul 2 01:49:56.627322 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 01:49:56.634694 waagent[1574]: 2024-07-02T01:49:56.634618Z INFO Daemon Daemon User core already exists, skip useradd Jul 2 01:49:56.640957 waagent[1574]: 2024-07-02T01:49:56.640291Z INFO Daemon Daemon Configure sudoer Jul 2 01:49:56.641307 systemd-networkd[1625]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 01:49:56.646475 waagent[1574]: 2024-07-02T01:49:56.646315Z INFO Daemon Daemon Configure sshd Jul 2 01:49:56.651964 waagent[1574]: 2024-07-02T01:49:56.651868Z INFO Daemon Daemon Deploy ssh public key. Jul 2 01:49:56.662423 systemd-networkd[1625]: eth0: DHCPv4 address 10.200.20.39/24, gateway 10.200.20.1 acquired from 168.63.129.16 Jul 2 01:49:56.664757 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 01:49:57.926652 waagent[1574]: 2024-07-02T01:49:57.926579Z INFO Daemon Daemon Provisioning complete Jul 2 01:49:57.949878 waagent[1574]: 2024-07-02T01:49:57.949809Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Jul 2 01:49:57.955779 waagent[1574]: 2024-07-02T01:49:57.955716Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Jul 2 01:49:57.965740 waagent[1574]: 2024-07-02T01:49:57.965679Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Jul 2 01:49:58.266277 waagent[1634]: 2024-07-02T01:49:58.266189Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Jul 2 01:49:58.267429 waagent[1634]: 2024-07-02T01:49:58.267368Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:49:58.267677 waagent[1634]: 2024-07-02T01:49:58.267629Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:49:58.280154 waagent[1634]: 2024-07-02T01:49:58.280080Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Jul 2 01:49:58.280480 waagent[1634]: 2024-07-02T01:49:58.280429Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Jul 2 01:49:58.348253 waagent[1634]: 2024-07-02T01:49:58.348115Z INFO ExtHandler ExtHandler Found private key matching thumbprint 7BB49B77886E69ECFE71A87ABD537418BE933108 Jul 2 01:49:58.348647 waagent[1634]: 2024-07-02T01:49:58.348595Z INFO ExtHandler ExtHandler Certificate with thumbprint 9D146C54DABB735A36F0B1A0AA773212C5F1DD0C has no matching private key. Jul 2 01:49:58.348951 waagent[1634]: 2024-07-02T01:49:58.348902Z INFO ExtHandler ExtHandler Fetch goal state completed Jul 2 01:49:58.362409 waagent[1634]: 2024-07-02T01:49:58.362354Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: b95ee686-af43-4ea5-a9ba-15c35454c6dc New eTag: 15523973600231752189] Jul 2 01:49:58.363131 waagent[1634]: 2024-07-02T01:49:58.363071Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Jul 2 01:49:58.442385 waagent[1634]: 2024-07-02T01:49:58.442221Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.5; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Jul 2 01:49:58.467094 waagent[1634]: 2024-07-02T01:49:58.467010Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1634 Jul 2 01:49:58.470942 waagent[1634]: 2024-07-02T01:49:58.470881Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.5', '', 'Flatcar Container Linux by Kinvolk'] Jul 2 01:49:58.472404 waagent[1634]: 2024-07-02T01:49:58.472346Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Jul 2 01:49:58.513243 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 01:49:58.513443 systemd[1]: Stopped kubelet.service. Jul 2 01:49:58.514722 systemd[1]: Starting kubelet.service... Jul 2 01:49:59.438935 waagent[1634]: 2024-07-02T01:49:59.438864Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Jul 2 01:49:59.439374 waagent[1634]: 2024-07-02T01:49:59.439285Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Jul 2 01:49:59.447864 waagent[1634]: 2024-07-02T01:49:59.447799Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Jul 2 01:49:59.448430 waagent[1634]: 2024-07-02T01:49:59.448367Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Jul 2 01:49:59.449587 waagent[1634]: 2024-07-02T01:49:59.449520Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Jul 2 01:49:59.450923 waagent[1634]: 2024-07-02T01:49:59.450851Z INFO ExtHandler ExtHandler Starting env monitor service. Jul 2 01:49:59.451768 waagent[1634]: 2024-07-02T01:49:59.451706Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:49:59.452053 waagent[1634]: 2024-07-02T01:49:59.452000Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:49:59.452766 waagent[1634]: 2024-07-02T01:49:59.452700Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Jul 2 01:49:59.453428 waagent[1634]: 2024-07-02T01:49:59.453356Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Jul 2 01:49:59.453867 waagent[1634]: 2024-07-02T01:49:59.453802Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:49:59.454079 waagent[1634]: 2024-07-02T01:49:59.454002Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Jul 2 01:49:59.454380 waagent[1634]: 2024-07-02T01:49:59.454287Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Jul 2 01:49:59.454660 waagent[1634]: 2024-07-02T01:49:59.454587Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Jul 2 01:49:59.454660 waagent[1634]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Jul 2 01:49:59.454660 waagent[1634]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Jul 2 01:49:59.454660 waagent[1634]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Jul 2 01:49:59.454660 waagent[1634]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:49:59.454660 waagent[1634]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:49:59.454660 waagent[1634]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:49:59.454901 waagent[1634]: 2024-07-02T01:49:59.454837Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:49:59.455681 waagent[1634]: 2024-07-02T01:49:59.455608Z INFO EnvHandler ExtHandler Configure routes Jul 2 01:49:59.455681 waagent[1634]: 2024-07-02T01:49:59.455254Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Jul 2 01:49:59.456034 waagent[1634]: 2024-07-02T01:49:59.455960Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Jul 2 01:49:59.459689 waagent[1634]: 2024-07-02T01:49:59.459609Z INFO EnvHandler ExtHandler Gateway:None Jul 2 01:49:59.459835 waagent[1634]: 2024-07-02T01:49:59.459785Z INFO EnvHandler ExtHandler Routes:None Jul 2 01:49:59.461269 waagent[1634]: 2024-07-02T01:49:59.461203Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Jul 2 01:49:59.468415 waagent[1634]: 2024-07-02T01:49:59.468349Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Jul 2 01:49:59.469877 waagent[1634]: 2024-07-02T01:49:59.469815Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Jul 2 01:49:59.473229 waagent[1634]: 2024-07-02T01:49:59.473170Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Jul 2 01:49:59.509782 waagent[1634]: 2024-07-02T01:49:59.509722Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Jul 2 01:49:59.585052 systemd[1]: Started kubelet.service. Jul 2 01:49:59.614136 waagent[1634]: 2024-07-02T01:49:59.614014Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1625' Jul 2 01:49:59.639246 kubelet[1662]: E0702 01:49:59.639190 1662 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:49:59.641997 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:49:59.642122 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:49:59.700890 waagent[1634]: 2024-07-02T01:49:59.699512Z INFO MonitorHandler ExtHandler Network interfaces: Jul 2 01:49:59.700890 waagent[1634]: Executing ['ip', '-a', '-o', 'link']: Jul 2 01:49:59.700890 waagent[1634]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Jul 2 01:49:59.700890 waagent[1634]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b7:8c:10 brd ff:ff:ff:ff:ff:ff Jul 2 01:49:59.700890 waagent[1634]: 3: enP47905s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b7:8c:10 brd ff:ff:ff:ff:ff:ff\ altname enP47905p0s2 Jul 2 01:49:59.700890 waagent[1634]: Executing ['ip', '-4', '-a', '-o', 'address']: Jul 2 01:49:59.700890 waagent[1634]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Jul 2 01:49:59.700890 waagent[1634]: 2: eth0 inet 10.200.20.39/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Jul 2 01:49:59.700890 waagent[1634]: Executing ['ip', '-6', '-a', '-o', 'address']: Jul 2 01:49:59.700890 waagent[1634]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Jul 2 01:49:59.700890 waagent[1634]: 2: eth0 inet6 fe80::222:48ff:feb7:8c10/64 scope link \ valid_lft forever preferred_lft forever Jul 2 01:49:59.743379 waagent[1634]: 2024-07-02T01:49:59.742281Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.11.1.4 -- exiting Jul 2 01:49:59.970424 waagent[1574]: 2024-07-02T01:49:59.970201Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Jul 2 01:49:59.975193 waagent[1574]: 2024-07-02T01:49:59.975141Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.11.1.4 to be the latest agent Jul 2 01:50:01.151725 waagent[1677]: 2024-07-02T01:50:01.151625Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.11.1.4) Jul 2 01:50:01.152493 waagent[1677]: 2024-07-02T01:50:01.152431Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.5 Jul 2 01:50:01.152637 waagent[1677]: 2024-07-02T01:50:01.152589Z INFO ExtHandler ExtHandler Python: 3.9.16 Jul 2 01:50:01.152769 waagent[1677]: 2024-07-02T01:50:01.152723Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Jul 2 01:50:01.161006 waagent[1677]: 2024-07-02T01:50:01.160890Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.5; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Jul 2 01:50:01.161408 waagent[1677]: 2024-07-02T01:50:01.161353Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:50:01.161568 waagent[1677]: 2024-07-02T01:50:01.161519Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:50:01.174442 waagent[1677]: 2024-07-02T01:50:01.174375Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Jul 2 01:50:01.189286 waagent[1677]: 2024-07-02T01:50:01.189227Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.151 Jul 2 01:50:01.190336 waagent[1677]: 2024-07-02T01:50:01.190268Z INFO ExtHandler Jul 2 01:50:01.190497 waagent[1677]: 2024-07-02T01:50:01.190447Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 2b220039-99ec-40e9-9322-1d0bb7c44ddd eTag: 15523973600231752189 source: Fabric] Jul 2 01:50:01.191217 waagent[1677]: 2024-07-02T01:50:01.191157Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Jul 2 01:50:01.192439 waagent[1677]: 2024-07-02T01:50:01.192377Z INFO ExtHandler Jul 2 01:50:01.192582 waagent[1677]: 2024-07-02T01:50:01.192534Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Jul 2 01:50:01.204833 waagent[1677]: 2024-07-02T01:50:01.204783Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Jul 2 01:50:01.205327 waagent[1677]: 2024-07-02T01:50:01.205276Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Jul 2 01:50:01.224147 waagent[1677]: 2024-07-02T01:50:01.224088Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Jul 2 01:50:01.290778 waagent[1677]: 2024-07-02T01:50:01.290648Z INFO ExtHandler Downloaded certificate {'thumbprint': '9D146C54DABB735A36F0B1A0AA773212C5F1DD0C', 'hasPrivateKey': False} Jul 2 01:50:01.291781 waagent[1677]: 2024-07-02T01:50:01.291718Z INFO ExtHandler Downloaded certificate {'thumbprint': '7BB49B77886E69ECFE71A87ABD537418BE933108', 'hasPrivateKey': True} Jul 2 01:50:01.292876 waagent[1677]: 2024-07-02T01:50:01.292814Z INFO ExtHandler Fetch goal state completed Jul 2 01:50:01.314924 waagent[1677]: 2024-07-02T01:50:01.314812Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022) Jul 2 01:50:01.326898 waagent[1677]: 2024-07-02T01:50:01.326810Z INFO ExtHandler ExtHandler WALinuxAgent-2.11.1.4 running as process 1677 Jul 2 01:50:01.330558 waagent[1677]: 2024-07-02T01:50:01.330494Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.5', '', 'Flatcar Container Linux by Kinvolk'] Jul 2 01:50:01.332080 waagent[1677]: 2024-07-02T01:50:01.332021Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Jul 2 01:50:01.336937 waagent[1677]: 2024-07-02T01:50:01.336877Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Jul 2 01:50:01.337324 waagent[1677]: 2024-07-02T01:50:01.337262Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Jul 2 01:50:01.344768 waagent[1677]: 2024-07-02T01:50:01.344716Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Jul 2 01:50:01.345378 waagent[1677]: 2024-07-02T01:50:01.345280Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Jul 2 01:50:01.351309 waagent[1677]: 2024-07-02T01:50:01.351211Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Jul 2 01:50:01.352486 waagent[1677]: 2024-07-02T01:50:01.352425Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Jul 2 01:50:01.354112 waagent[1677]: 2024-07-02T01:50:01.354043Z INFO ExtHandler ExtHandler Starting env monitor service. Jul 2 01:50:01.354407 waagent[1677]: 2024-07-02T01:50:01.354322Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:50:01.355149 waagent[1677]: 2024-07-02T01:50:01.355072Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Jul 2 01:50:01.355360 waagent[1677]: 2024-07-02T01:50:01.355277Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:50:01.356032 waagent[1677]: 2024-07-02T01:50:01.355959Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Jul 2 01:50:01.356749 waagent[1677]: 2024-07-02T01:50:01.356677Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Jul 2 01:50:01.356749 waagent[1677]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Jul 2 01:50:01.356749 waagent[1677]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Jul 2 01:50:01.356749 waagent[1677]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Jul 2 01:50:01.356749 waagent[1677]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:50:01.356749 waagent[1677]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:50:01.356749 waagent[1677]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Jul 2 01:50:01.358599 waagent[1677]: 2024-07-02T01:50:01.358461Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jul 2 01:50:01.358818 waagent[1677]: 2024-07-02T01:50:01.358761Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Jul 2 01:50:01.359324 waagent[1677]: 2024-07-02T01:50:01.359255Z INFO EnvHandler ExtHandler Configure routes Jul 2 01:50:01.359493 waagent[1677]: 2024-07-02T01:50:01.359434Z INFO EnvHandler ExtHandler Gateway:None Jul 2 01:50:01.359606 waagent[1677]: 2024-07-02T01:50:01.359561Z INFO EnvHandler ExtHandler Routes:None Jul 2 01:50:01.360645 waagent[1677]: 2024-07-02T01:50:01.360572Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Jul 2 01:50:01.362406 waagent[1677]: 2024-07-02T01:50:01.362166Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Jul 2 01:50:01.363484 waagent[1677]: 2024-07-02T01:50:01.363395Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Jul 2 01:50:01.363704 waagent[1677]: 2024-07-02T01:50:01.363627Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Jul 2 01:50:01.364001 waagent[1677]: 2024-07-02T01:50:01.363922Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Jul 2 01:50:01.381757 waagent[1677]: 2024-07-02T01:50:01.381674Z INFO ExtHandler ExtHandler Downloading agent manifest Jul 2 01:50:01.388043 waagent[1677]: 2024-07-02T01:50:01.387962Z INFO MonitorHandler ExtHandler Network interfaces: Jul 2 01:50:01.388043 waagent[1677]: Executing ['ip', '-a', '-o', 'link']: Jul 2 01:50:01.388043 waagent[1677]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Jul 2 01:50:01.388043 waagent[1677]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b7:8c:10 brd ff:ff:ff:ff:ff:ff Jul 2 01:50:01.388043 waagent[1677]: 3: enP47905s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b7:8c:10 brd ff:ff:ff:ff:ff:ff\ altname enP47905p0s2 Jul 2 01:50:01.388043 waagent[1677]: Executing ['ip', '-4', '-a', '-o', 'address']: Jul 2 01:50:01.388043 waagent[1677]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Jul 2 01:50:01.388043 waagent[1677]: 2: eth0 inet 10.200.20.39/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Jul 2 01:50:01.388043 waagent[1677]: Executing ['ip', '-6', '-a', '-o', 'address']: Jul 2 01:50:01.388043 waagent[1677]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Jul 2 01:50:01.388043 waagent[1677]: 2: eth0 inet6 fe80::222:48ff:feb7:8c10/64 scope link \ valid_lft forever preferred_lft forever Jul 2 01:50:01.420697 waagent[1677]: 2024-07-02T01:50:01.420583Z INFO ExtHandler ExtHandler Jul 2 01:50:01.421012 waagent[1677]: 2024-07-02T01:50:01.420959Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: f96571e4-6d2b-4e59-8780-f8b56da16da3 correlation eb5d2598-0312-4fef-b96b-82248e40f9f8 created: 2024-07-02T01:48:28.316879Z] Jul 2 01:50:01.422027 waagent[1677]: 2024-07-02T01:50:01.421969Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Jul 2 01:50:01.424028 waagent[1677]: 2024-07-02T01:50:01.423974Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Jul 2 01:50:01.444382 waagent[1677]: 2024-07-02T01:50:01.444299Z INFO ExtHandler ExtHandler Looking for existing remote access users. Jul 2 01:50:01.459103 waagent[1677]: 2024-07-02T01:50:01.459033Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.11.1.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: AC535AC8-A64E-4481-9453-D9832D3C1B14;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Jul 2 01:50:01.631021 waagent[1677]: 2024-07-02T01:50:01.630878Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Jul 2 01:50:01.631021 waagent[1677]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.631021 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.631021 waagent[1677]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.631021 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.631021 waagent[1677]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.631021 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.631021 waagent[1677]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Jul 2 01:50:01.631021 waagent[1677]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Jul 2 01:50:01.631021 waagent[1677]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Jul 2 01:50:01.638371 waagent[1677]: 2024-07-02T01:50:01.638218Z INFO EnvHandler ExtHandler Current Firewall rules: Jul 2 01:50:01.638371 waagent[1677]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.638371 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.638371 waagent[1677]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.638371 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.638371 waagent[1677]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Jul 2 01:50:01.638371 waagent[1677]: pkts bytes target prot opt in out source destination Jul 2 01:50:01.638371 waagent[1677]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Jul 2 01:50:01.638371 waagent[1677]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Jul 2 01:50:01.638371 waagent[1677]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Jul 2 01:50:01.638866 waagent[1677]: 2024-07-02T01:50:01.638809Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Jul 2 01:50:09.763194 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 01:50:09.763384 systemd[1]: Stopped kubelet.service. Jul 2 01:50:09.764691 systemd[1]: Starting kubelet.service... Jul 2 01:50:09.840662 systemd[1]: Started kubelet.service. Jul 2 01:50:10.352396 kubelet[1732]: E0702 01:50:10.352307 1732 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:50:10.354913 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:50:10.355033 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:50:20.513237 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 2 01:50:20.513422 systemd[1]: Stopped kubelet.service. Jul 2 01:50:20.514764 systemd[1]: Starting kubelet.service... Jul 2 01:50:20.591502 systemd[1]: Started kubelet.service. Jul 2 01:50:21.147130 kubelet[1742]: E0702 01:50:21.147060 1742 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:50:21.149749 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:50:21.149869 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:50:25.305970 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Jul 2 01:50:31.263257 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 2 01:50:31.263455 systemd[1]: Stopped kubelet.service. Jul 2 01:50:31.264793 systemd[1]: Starting kubelet.service... Jul 2 01:50:31.365250 systemd[1]: Started kubelet.service. Jul 2 01:50:31.402296 kubelet[1752]: E0702 01:50:31.402236 1752 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:50:31.404633 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:50:31.404754 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:50:33.142101 update_engine[1465]: I0702 01:50:33.141746 1465 update_attempter.cc:509] Updating boot flags... Jul 2 01:50:35.389317 systemd[1]: Created slice system-sshd.slice. Jul 2 01:50:35.390757 systemd[1]: Started sshd@0-10.200.20.39:22-10.200.16.10:45748.service. Jul 2 01:50:35.998016 sshd[1826]: Accepted publickey for core from 10.200.16.10 port 45748 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:36.015438 sshd[1826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:36.019289 systemd-logind[1463]: New session 3 of user core. Jul 2 01:50:36.019714 systemd[1]: Started session-3.scope. Jul 2 01:50:36.372498 systemd[1]: Started sshd@1-10.200.20.39:22-10.200.16.10:45750.service. Jul 2 01:50:36.799232 sshd[1831]: Accepted publickey for core from 10.200.16.10 port 45750 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:36.800893 sshd[1831]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:36.804917 systemd[1]: Started session-4.scope. Jul 2 01:50:36.806251 systemd-logind[1463]: New session 4 of user core. Jul 2 01:50:37.110362 sshd[1831]: pam_unix(sshd:session): session closed for user core Jul 2 01:50:37.113740 systemd[1]: sshd@1-10.200.20.39:22-10.200.16.10:45750.service: Deactivated successfully. Jul 2 01:50:37.114440 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 01:50:37.114913 systemd-logind[1463]: Session 4 logged out. Waiting for processes to exit. Jul 2 01:50:37.115583 systemd-logind[1463]: Removed session 4. Jul 2 01:50:37.181933 systemd[1]: Started sshd@2-10.200.20.39:22-10.200.16.10:45766.service. Jul 2 01:50:37.614591 sshd[1837]: Accepted publickey for core from 10.200.16.10 port 45766 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:37.615850 sshd[1837]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:37.619693 systemd-logind[1463]: New session 5 of user core. Jul 2 01:50:37.620093 systemd[1]: Started session-5.scope. Jul 2 01:50:37.924462 sshd[1837]: pam_unix(sshd:session): session closed for user core Jul 2 01:50:37.927847 systemd[1]: sshd@2-10.200.20.39:22-10.200.16.10:45766.service: Deactivated successfully. Jul 2 01:50:37.928507 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 01:50:37.929032 systemd-logind[1463]: Session 5 logged out. Waiting for processes to exit. Jul 2 01:50:37.929852 systemd-logind[1463]: Removed session 5. Jul 2 01:50:37.995088 systemd[1]: Started sshd@3-10.200.20.39:22-10.200.16.10:45768.service. Jul 2 01:50:38.425278 sshd[1846]: Accepted publickey for core from 10.200.16.10 port 45768 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:38.426557 sshd[1846]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:38.430257 systemd-logind[1463]: New session 6 of user core. Jul 2 01:50:38.430691 systemd[1]: Started session-6.scope. Jul 2 01:50:38.737019 sshd[1846]: pam_unix(sshd:session): session closed for user core Jul 2 01:50:38.739344 systemd[1]: sshd@3-10.200.20.39:22-10.200.16.10:45768.service: Deactivated successfully. Jul 2 01:50:38.739988 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 01:50:38.740526 systemd-logind[1463]: Session 6 logged out. Waiting for processes to exit. Jul 2 01:50:38.741361 systemd-logind[1463]: Removed session 6. Jul 2 01:50:38.813341 systemd[1]: Started sshd@4-10.200.20.39:22-10.200.16.10:57748.service. Jul 2 01:50:39.275349 sshd[1852]: Accepted publickey for core from 10.200.16.10 port 57748 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:39.276614 sshd[1852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:39.280384 systemd-logind[1463]: New session 7 of user core. Jul 2 01:50:39.280821 systemd[1]: Started session-7.scope. Jul 2 01:50:39.780099 sudo[1855]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 01:50:39.780317 sudo[1855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 01:50:39.833504 dbus-daemon[1448]: avc: received setenforce notice (enforcing=1) Jul 2 01:50:39.834366 sudo[1855]: pam_unix(sudo:session): session closed for user root Jul 2 01:50:39.934378 sshd[1852]: pam_unix(sshd:session): session closed for user core Jul 2 01:50:39.937112 systemd[1]: sshd@4-10.200.20.39:22-10.200.16.10:57748.service: Deactivated successfully. Jul 2 01:50:39.937912 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 01:50:39.938519 systemd-logind[1463]: Session 7 logged out. Waiting for processes to exit. Jul 2 01:50:39.939606 systemd-logind[1463]: Removed session 7. Jul 2 01:50:40.010893 systemd[1]: Started sshd@5-10.200.20.39:22-10.200.16.10:57752.service. Jul 2 01:50:40.473248 sshd[1859]: Accepted publickey for core from 10.200.16.10 port 57752 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:40.474649 sshd[1859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:40.478535 systemd-logind[1463]: New session 8 of user core. Jul 2 01:50:40.478993 systemd[1]: Started session-8.scope. Jul 2 01:50:40.734417 sudo[1863]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 01:50:40.734922 sudo[1863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 01:50:40.737519 sudo[1863]: pam_unix(sudo:session): session closed for user root Jul 2 01:50:40.741977 sudo[1862]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 01:50:40.742472 sudo[1862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 01:50:40.751153 systemd[1]: Stopping audit-rules.service... Jul 2 01:50:40.751000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 01:50:40.762656 auditctl[1866]: No rules Jul 2 01:50:40.751000 audit[1866]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe2018830 a2=420 a3=0 items=0 ppid=1 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:40.763297 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 01:50:40.763496 systemd[1]: Stopped audit-rules.service. Jul 2 01:50:40.765145 systemd[1]: Starting audit-rules.service... Jul 2 01:50:40.783995 kernel: audit: type=1305 audit(1719885040.751:217): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 01:50:40.784114 kernel: audit: type=1300 audit(1719885040.751:217): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe2018830 a2=420 a3=0 items=0 ppid=1 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:40.784138 kernel: audit: type=1327 audit(1719885040.751:217): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 01:50:40.751000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 01:50:40.786371 augenrules[1883]: No rules Jul 2 01:50:40.787313 systemd[1]: Finished audit-rules.service. Jul 2 01:50:40.788457 sudo[1862]: pam_unix(sudo:session): session closed for user root Jul 2 01:50:40.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.805753 kernel: audit: type=1131 audit(1719885040.762:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.805845 kernel: audit: type=1130 audit(1719885040.786:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.787000 audit[1862]: USER_END pid=1862 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.838069 kernel: audit: type=1106 audit(1719885040.787:220): pid=1862 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.838144 kernel: audit: type=1104 audit(1719885040.787:221): pid=1862 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.787000 audit[1862]: CRED_DISP pid=1862 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.874546 sshd[1859]: pam_unix(sshd:session): session closed for user core Jul 2 01:50:40.874000 audit[1859]: USER_END pid=1859 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:40.898722 systemd[1]: sshd@5-10.200.20.39:22-10.200.16.10:57752.service: Deactivated successfully. Jul 2 01:50:40.874000 audit[1859]: CRED_DISP pid=1859 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:40.916875 kernel: audit: type=1106 audit(1719885040.874:222): pid=1859 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:40.916966 kernel: audit: type=1104 audit(1719885040.874:223): pid=1859 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:40.899465 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 01:50:40.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.39:22-10.200.16.10:57752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.917535 systemd-logind[1463]: Session 8 logged out. Waiting for processes to exit. Jul 2 01:50:40.934789 systemd-logind[1463]: Removed session 8. Jul 2 01:50:40.935354 kernel: audit: type=1131 audit(1719885040.897:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.39:22-10.200.16.10:57752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:40.944795 systemd[1]: Started sshd@6-10.200.20.39:22-10.200.16.10:57760.service. Jul 2 01:50:40.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.39:22-10.200.16.10:57760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.371000 audit[1889]: USER_ACCT pid=1889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:41.372733 sshd[1889]: Accepted publickey for core from 10.200.16.10 port 57760 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:50:41.372000 audit[1889]: CRED_ACQ pid=1889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:41.372000 audit[1889]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff5c9160 a2=3 a3=1 items=0 ppid=1 pid=1889 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:41.372000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:50:41.374321 sshd[1889]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:50:41.378199 systemd-logind[1463]: New session 9 of user core. Jul 2 01:50:41.378621 systemd[1]: Started session-9.scope. Jul 2 01:50:41.381000 audit[1889]: USER_START pid=1889 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:41.382000 audit[1891]: CRED_ACQ pid=1891 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:50:41.513200 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Jul 2 01:50:41.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.513399 systemd[1]: Stopped kubelet.service. Jul 2 01:50:41.514788 systemd[1]: Starting kubelet.service... Jul 2 01:50:41.615000 audit[1894]: USER_ACCT pid=1894 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.615000 audit[1894]: CRED_REFR pid=1894 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.617000 audit[1894]: USER_START pid=1894 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:50:41.616775 sudo[1894]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 01:50:41.617005 sudo[1894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 01:50:42.002728 systemd[1]: Starting docker.service... Jul 2 01:50:42.035383 env[1904]: time="2024-07-02T01:50:42.035306777Z" level=info msg="Starting up" Jul 2 01:50:42.036701 env[1904]: time="2024-07-02T01:50:42.036675372Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 01:50:42.036795 env[1904]: time="2024-07-02T01:50:42.036782572Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 01:50:42.036873 env[1904]: time="2024-07-02T01:50:42.036858172Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 01:50:42.036931 env[1904]: time="2024-07-02T01:50:42.036919732Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 01:50:42.038567 env[1904]: time="2024-07-02T01:50:42.038541246Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 01:50:42.038666 env[1904]: time="2024-07-02T01:50:42.038653086Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 01:50:42.038736 env[1904]: time="2024-07-02T01:50:42.038720086Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 01:50:42.038784 env[1904]: time="2024-07-02T01:50:42.038772805Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 01:50:42.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:42.500644 systemd[1]: Started kubelet.service. Jul 2 01:50:42.549041 kubelet[1914]: E0702 01:50:42.548996 1914 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:50:42.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 01:50:42.551304 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:50:42.551464 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:50:42.652119 env[1904]: time="2024-07-02T01:50:42.651921143Z" level=info msg="Loading containers: start." Jul 2 01:50:42.737000 audit[1940]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.737000 audit[1940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffff1c0a50 a2=0 a3=1 items=0 ppid=1904 pid=1940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.737000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 01:50:42.739000 audit[1942]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.739000 audit[1942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffa7fb1a0 a2=0 a3=1 items=0 ppid=1904 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.739000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 01:50:42.741000 audit[1944]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.741000 audit[1944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffed5592f0 a2=0 a3=1 items=0 ppid=1904 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.741000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 01:50:42.743000 audit[1946]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.743000 audit[1946]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc7bd3d30 a2=0 a3=1 items=0 ppid=1904 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 01:50:42.745000 audit[1948]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.745000 audit[1948]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe91c94d0 a2=0 a3=1 items=0 ppid=1904 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.745000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 01:50:42.746000 audit[1950]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.746000 audit[1950]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffefe03570 a2=0 a3=1 items=0 ppid=1904 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.746000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 01:50:42.763000 audit[1952]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.763000 audit[1952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa16f6e0 a2=0 a3=1 items=0 ppid=1904 pid=1952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.763000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 01:50:42.765000 audit[1954]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.765000 audit[1954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe005b7b0 a2=0 a3=1 items=0 ppid=1904 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.765000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 01:50:42.767000 audit[1956]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1956 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.767000 audit[1956]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc3f28e70 a2=0 a3=1 items=0 ppid=1904 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.767000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 01:50:42.784000 audit[1960]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.784000 audit[1960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd337cfc0 a2=0 a3=1 items=0 ppid=1904 pid=1960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.784000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 01:50:42.786000 audit[1961]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.786000 audit[1961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffea3e1310 a2=0 a3=1 items=0 ppid=1904 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.786000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 01:50:42.814380 kernel: Initializing XFRM netlink socket Jul 2 01:50:42.835625 env[1904]: time="2024-07-02T01:50:42.835580085Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 01:50:42.913000 audit[1969]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.913000 audit[1969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff7791110 a2=0 a3=1 items=0 ppid=1904 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.913000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 01:50:42.935000 audit[1972]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.935000 audit[1972]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff0868040 a2=0 a3=1 items=0 ppid=1904 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.935000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 01:50:42.939000 audit[1975]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.939000 audit[1975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd8590330 a2=0 a3=1 items=0 ppid=1904 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 01:50:42.940000 audit[1977]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.940000 audit[1977]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc829c6f0 a2=0 a3=1 items=0 ppid=1904 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 01:50:42.942000 audit[1979]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.942000 audit[1979]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff714e660 a2=0 a3=1 items=0 ppid=1904 pid=1979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 01:50:42.944000 audit[1981]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1981 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.944000 audit[1981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe14dcf30 a2=0 a3=1 items=0 ppid=1904 pid=1981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 01:50:42.946000 audit[1983]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.946000 audit[1983]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff6c53970 a2=0 a3=1 items=0 ppid=1904 pid=1983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 01:50:42.948000 audit[1985]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.948000 audit[1985]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc47e33f0 a2=0 a3=1 items=0 ppid=1904 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.948000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 01:50:42.950000 audit[1987]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.950000 audit[1987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd6653e90 a2=0 a3=1 items=0 ppid=1904 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 01:50:42.952000 audit[1989]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.952000 audit[1989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffdd2aa490 a2=0 a3=1 items=0 ppid=1904 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.952000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 01:50:42.953000 audit[1991]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.953000 audit[1991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe58fdea0 a2=0 a3=1 items=0 ppid=1904 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.953000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 01:50:42.955809 systemd-networkd[1625]: docker0: Link UP Jul 2 01:50:42.977000 audit[1995]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.977000 audit[1995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe5cbdd20 a2=0 a3=1 items=0 ppid=1904 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 01:50:42.978000 audit[1996]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:50:42.978000 audit[1996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe2b996c0 a2=0 a3=1 items=0 ppid=1904 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:50:42.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 01:50:42.980278 env[1904]: time="2024-07-02T01:50:42.980249838Z" level=info msg="Loading containers: done." Jul 2 01:50:42.989804 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1386759238-merged.mount: Deactivated successfully. Jul 2 01:50:43.038465 env[1904]: time="2024-07-02T01:50:43.037667732Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 01:50:43.038465 env[1904]: time="2024-07-02T01:50:43.037860292Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 01:50:43.038465 env[1904]: time="2024-07-02T01:50:43.037962492Z" level=info msg="Daemon has completed initialization" Jul 2 01:50:43.134541 systemd[1]: Started docker.service. Jul 2 01:50:43.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:43.140458 env[1904]: time="2024-07-02T01:50:43.140403048Z" level=info msg="API listen on /run/docker.sock" Jul 2 01:50:48.739819 env[1474]: time="2024-07-02T01:50:48.739763476Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\"" Jul 2 01:50:49.622549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1497232991.mount: Deactivated successfully. Jul 2 01:50:51.570859 env[1474]: time="2024-07-02T01:50:51.570810671Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:51.577629 env[1474]: time="2024-07-02T01:50:51.577594808Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:46bfddf397d499c68edd3a505a02ab6b7a77acc6cbab684122699693c44fdc8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:51.581786 env[1474]: time="2024-07-02T01:50:51.581740783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:51.587418 env[1474]: time="2024-07-02T01:50:51.587389051Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:f4d993b3d73cc0d59558be584b5b40785b4a96874bc76873b69d1dd818485e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:51.587881 env[1474]: time="2024-07-02T01:50:51.587856990Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\" returns image reference \"sha256:46bfddf397d499c68edd3a505a02ab6b7a77acc6cbab684122699693c44fdc8a\"" Jul 2 01:50:51.598133 env[1474]: time="2024-07-02T01:50:51.598098053Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\"" Jul 2 01:50:52.763262 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Jul 2 01:50:52.797184 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 01:50:52.797260 kernel: audit: type=1130 audit(1719885052.762:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:52.797285 kernel: audit: type=1131 audit(1719885052.762:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:52.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:52.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:52.763466 systemd[1]: Stopped kubelet.service. Jul 2 01:50:52.764915 systemd[1]: Starting kubelet.service... Jul 2 01:50:52.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:52.903483 systemd[1]: Started kubelet.service. Jul 2 01:50:52.918409 kernel: audit: type=1130 audit(1719885052.902:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:50:53.451804 kubelet[2045]: E0702 01:50:53.451760 2045 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:50:53.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 01:50:53.453628 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:50:53.453744 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:50:53.470347 kernel: audit: type=1131 audit(1719885053.452:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 01:50:54.813443 env[1474]: time="2024-07-02T01:50:54.813402302Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:54.821234 env[1474]: time="2024-07-02T01:50:54.821199461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9df0eeeacdd8f3cd9f3c3a08fbdfd665da4283115b53bf8b5d434382c02230a8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:54.826946 env[1474]: time="2024-07-02T01:50:54.826909226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:54.833918 env[1474]: time="2024-07-02T01:50:54.833876420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:692fc3f88a60b3afc76492ad347306d34042000f56f230959e9367fd59c48b1e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:54.834548 env[1474]: time="2024-07-02T01:50:54.834519433Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\" returns image reference \"sha256:9df0eeeacdd8f3cd9f3c3a08fbdfd665da4283115b53bf8b5d434382c02230a8\"" Jul 2 01:50:54.843997 env[1474]: time="2024-07-02T01:50:54.843966085Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\"" Jul 2 01:50:56.351642 env[1474]: time="2024-07-02T01:50:56.351592525Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:56.357084 env[1474]: time="2024-07-02T01:50:56.357040433Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4d823a436d04c2aac5c8e0dd5a83efa81f1917a3c017feabc4917150cb90fa29,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:56.361892 env[1474]: time="2024-07-02T01:50:56.361852606Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:56.365749 env[1474]: time="2024-07-02T01:50:56.365712575Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:b91a4e45debd0d5336d9f533aefdf47d4b39b24071feb459e521709b9e4ec24f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:56.366547 env[1474]: time="2024-07-02T01:50:56.366519024Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\" returns image reference \"sha256:4d823a436d04c2aac5c8e0dd5a83efa81f1917a3c017feabc4917150cb90fa29\"" Jul 2 01:50:56.375608 env[1474]: time="2024-07-02T01:50:56.375569911Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\"" Jul 2 01:50:57.668463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1627424057.mount: Deactivated successfully. Jul 2 01:50:58.132889 env[1474]: time="2024-07-02T01:50:58.132829283Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:58.138697 env[1474]: time="2024-07-02T01:50:58.138637868Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a75156450625cf630b7b9b1e8b7d881969131638181257d0d67db0876a25b32f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:58.143092 env[1474]: time="2024-07-02T01:50:58.143059265Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:58.147420 env[1474]: time="2024-07-02T01:50:58.147386465Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:88bacb3e1d6c0c37c6da95c6d6b8e30531d0b4d0ab540cc290b0af51fbfebd90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:50:58.147853 env[1474]: time="2024-07-02T01:50:58.147827529Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\" returns image reference \"sha256:a75156450625cf630b7b9b1e8b7d881969131638181257d0d67db0876a25b32f\"" Jul 2 01:50:58.157451 env[1474]: time="2024-07-02T01:50:58.157412175Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 01:50:58.807556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2280597677.mount: Deactivated successfully. Jul 2 01:51:00.931209 env[1474]: time="2024-07-02T01:51:00.931153153Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:00.940267 env[1474]: time="2024-07-02T01:51:00.940226035Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:00.945822 env[1474]: time="2024-07-02T01:51:00.945776161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:00.951649 env[1474]: time="2024-07-02T01:51:00.951615436Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:00.952505 env[1474]: time="2024-07-02T01:51:00.952466686Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93\"" Jul 2 01:51:00.961339 env[1474]: time="2024-07-02T01:51:00.961284137Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 01:51:01.619287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1465563843.mount: Deactivated successfully. Jul 2 01:51:01.646611 env[1474]: time="2024-07-02T01:51:01.646561549Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:01.654283 env[1474]: time="2024-07-02T01:51:01.654245807Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:01.658100 env[1474]: time="2024-07-02T01:51:01.658067436Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:01.662005 env[1474]: time="2024-07-02T01:51:01.661971303Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:01.662243 env[1474]: time="2024-07-02T01:51:01.662218015Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Jul 2 01:51:01.672531 env[1474]: time="2024-07-02T01:51:01.672483024Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 01:51:02.232861 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2028868182.mount: Deactivated successfully. Jul 2 01:51:03.513193 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 7. Jul 2 01:51:03.513403 systemd[1]: Stopped kubelet.service. Jul 2 01:51:03.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.514813 systemd[1]: Starting kubelet.service... Jul 2 01:51:03.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.552529 kernel: audit: type=1130 audit(1719885063.513:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.552653 kernel: audit: type=1131 audit(1719885063.513:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.633404 systemd[1]: Started kubelet.service. Jul 2 01:51:03.655356 kernel: audit: type=1130 audit(1719885063.633:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:03.710198 kubelet[2080]: E0702 01:51:03.710130 2080 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 01:51:03.711926 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 01:51:03.712061 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 01:51:03.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 01:51:03.730394 kernel: audit: type=1131 audit(1719885063.711:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 01:51:04.779073 env[1474]: time="2024-07-02T01:51:04.779005495Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:04.790534 env[1474]: time="2024-07-02T01:51:04.790480012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:79f8d13ae8b8839cadfb2f83416935f5184206d386028e2d1263577f0ab3620b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:04.795564 env[1474]: time="2024-07-02T01:51:04.795509373Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:04.800506 env[1474]: time="2024-07-02T01:51:04.800472257Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:04.801479 env[1474]: time="2024-07-02T01:51:04.801204393Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:79f8d13ae8b8839cadfb2f83416935f5184206d386028e2d1263577f0ab3620b\"" Jul 2 01:51:09.485738 systemd[1]: Stopped kubelet.service. Jul 2 01:51:09.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.487957 systemd[1]: Starting kubelet.service... Jul 2 01:51:09.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.526466 kernel: audit: type=1130 audit(1719885069.484:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.527963 kernel: audit: type=1131 audit(1719885069.484:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.544095 systemd[1]: Reloading. Jul 2 01:51:09.619174 /usr/lib/systemd/system-generators/torcx-generator[2173]: time="2024-07-02T01:51:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 01:51:09.619217 /usr/lib/systemd/system-generators/torcx-generator[2173]: time="2024-07-02T01:51:09Z" level=info msg="torcx already run" Jul 2 01:51:09.718453 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 01:51:09.718545 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 01:51:09.734258 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847523 kernel: audit: type=1400 audit(1719885069.804:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847592 kernel: audit: type=1400 audit(1719885069.804:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.867909 kernel: audit: type=1400 audit(1719885069.804:275): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.887538 kernel: audit: type=1400 audit(1719885069.804:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.887616 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.912545 kernel: audit: type=1400 audit(1719885069.804:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.912621 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938935 kernel: audit: type=1400 audit(1719885069.804:278): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.824000 audit: BPF prog-id=44 op=LOAD Jul 2 01:51:09.824000 audit: BPF prog-id=36 op=UNLOAD Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit: BPF prog-id=45 op=LOAD Jul 2 01:51:09.825000 audit: BPF prog-id=27 op=UNLOAD Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit: BPF prog-id=46 op=LOAD Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.846000 audit: BPF prog-id=47 op=LOAD Jul 2 01:51:09.846000 audit: BPF prog-id=28 op=UNLOAD Jul 2 01:51:09.846000 audit: BPF prog-id=29 op=UNLOAD Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit: BPF prog-id=48 op=LOAD Jul 2 01:51:09.866000 audit: BPF prog-id=37 op=UNLOAD Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.886000 audit: BPF prog-id=49 op=LOAD Jul 2 01:51:09.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit: BPF prog-id=53 op=LOAD Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.938000 audit: BPF prog-id=30 op=UNLOAD Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.939000 audit: BPF prog-id=55 op=LOAD Jul 2 01:51:09.939000 audit: BPF prog-id=43 op=UNLOAD Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit: BPF prog-id=56 op=LOAD Jul 2 01:51:09.940000 audit: BPF prog-id=33 op=UNLOAD Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit: BPF prog-id=57 op=LOAD Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:09.940000 audit: BPF prog-id=58 op=LOAD Jul 2 01:51:09.940000 audit: BPF prog-id=34 op=UNLOAD Jul 2 01:51:09.940000 audit: BPF prog-id=35 op=UNLOAD Jul 2 01:51:09.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.964027 systemd[1]: Stopping kubelet.service... Jul 2 01:51:09.964932 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 01:51:09.965116 systemd[1]: Stopped kubelet.service. Jul 2 01:51:09.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:09.967219 systemd[1]: Starting kubelet.service... Jul 2 01:51:10.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:10.051244 systemd[1]: Started kubelet.service. Jul 2 01:51:10.101110 kubelet[2239]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 01:51:10.101426 kubelet[2239]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 01:51:10.101482 kubelet[2239]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 01:51:10.101623 kubelet[2239]: I0702 01:51:10.101587 2239 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 01:51:11.349315 kubelet[2239]: I0702 01:51:11.349278 2239 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 01:51:11.349315 kubelet[2239]: I0702 01:51:11.349310 2239 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 01:51:11.349672 kubelet[2239]: I0702 01:51:11.349544 2239 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 01:51:11.367887 kubelet[2239]: E0702 01:51:11.367852 2239 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.39:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.369458 kubelet[2239]: I0702 01:51:11.369441 2239 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 01:51:11.379324 kubelet[2239]: I0702 01:51:11.379281 2239 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 01:51:11.380831 kubelet[2239]: I0702 01:51:11.380800 2239 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 01:51:11.381040 kubelet[2239]: I0702 01:51:11.381016 2239 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 01:51:11.381144 kubelet[2239]: I0702 01:51:11.381045 2239 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 01:51:11.381144 kubelet[2239]: I0702 01:51:11.381055 2239 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 01:51:11.381197 kubelet[2239]: I0702 01:51:11.381177 2239 state_mem.go:36] "Initialized new in-memory state store" Jul 2 01:51:11.383659 kubelet[2239]: I0702 01:51:11.383636 2239 kubelet.go:396] "Attempting to sync node with API server" Jul 2 01:51:11.383723 kubelet[2239]: I0702 01:51:11.383667 2239 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 01:51:11.384128 kubelet[2239]: I0702 01:51:11.384106 2239 kubelet.go:312] "Adding apiserver pod source" Jul 2 01:51:11.384179 kubelet[2239]: I0702 01:51:11.384134 2239 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 01:51:11.384320 kubelet[2239]: W0702 01:51:11.384275 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.200.20.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.5-a-b4a22a1448&limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.384456 kubelet[2239]: E0702 01:51:11.384441 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.5-a-b4a22a1448&limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.385059 kubelet[2239]: W0702 01:51:11.385017 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.200.20.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.385182 kubelet[2239]: E0702 01:51:11.385169 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.385368 kubelet[2239]: I0702 01:51:11.385352 2239 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 01:51:11.385736 kubelet[2239]: I0702 01:51:11.385715 2239 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 01:51:11.385858 kubelet[2239]: W0702 01:51:11.385846 2239 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 01:51:11.386692 kubelet[2239]: I0702 01:51:11.386668 2239 server.go:1256] "Started kubelet" Jul 2 01:51:11.391000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:11.391000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:11.391000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bfe390 a1=400079c4b0 a2=4000bfe360 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.391000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:11.393511 kubelet[2239]: I0702 01:51:11.393463 2239 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 01:51:11.392000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:11.392000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:11.392000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a49400 a1=400079c4c8 a2=4000bfe420 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.392000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:11.393839 kubelet[2239]: I0702 01:51:11.393826 2239 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 01:51:11.394694 kubelet[2239]: I0702 01:51:11.394670 2239 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 01:51:11.396757 kubelet[2239]: I0702 01:51:11.396723 2239 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 01:51:11.397557 kubelet[2239]: I0702 01:51:11.397522 2239 server.go:461] "Adding debug handlers to kubelet server" Jul 2 01:51:11.398611 kubelet[2239]: I0702 01:51:11.398577 2239 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 01:51:11.398806 kubelet[2239]: I0702 01:51:11.398777 2239 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 01:51:11.398906 kubelet[2239]: E0702 01:51:11.393879 2239 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.39:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.39:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.5-a-b4a22a1448.17de425c2e7f95a6 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.5-a-b4a22a1448,UID:ci-3510.3.5-a-b4a22a1448,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.5-a-b4a22a1448,},FirstTimestamp:2024-07-02 01:51:11.386645926 +0000 UTC m=+1.330973516,LastTimestamp:2024-07-02 01:51:11.386645926 +0000 UTC m=+1.330973516,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.5-a-b4a22a1448,}" Jul 2 01:51:11.400020 kubelet[2239]: E0702 01:51:11.399991 2239 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 01:51:11.400394 kubelet[2239]: I0702 01:51:11.400268 2239 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 01:51:11.401720 kubelet[2239]: I0702 01:51:11.401684 2239 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 01:51:11.401796 kubelet[2239]: I0702 01:51:11.401747 2239 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 01:51:11.402177 kubelet[2239]: W0702 01:51:11.402114 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://10.200.20.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.402177 kubelet[2239]: E0702 01:51:11.402173 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.401000 audit[2250]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.401000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc9128b70 a2=0 a3=1 items=0 ppid=2239 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 01:51:11.402872 kubelet[2239]: E0702 01:51:11.402837 2239 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"ci-3510.3.5-a-b4a22a1448\" not found" Jul 2 01:51:11.403148 kubelet[2239]: E0702 01:51:11.403114 2239 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": dial tcp 10.200.20.39:6443: connect: connection refused" interval="200ms" Jul 2 01:51:11.403664 kubelet[2239]: I0702 01:51:11.403629 2239 factory.go:221] Registration of the systemd container factory successfully Jul 2 01:51:11.403759 kubelet[2239]: I0702 01:51:11.403731 2239 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 01:51:11.402000 audit[2251]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.402000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc830f7d0 a2=0 a3=1 items=0 ppid=2239 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.402000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 01:51:11.405870 kubelet[2239]: I0702 01:51:11.405830 2239 factory.go:221] Registration of the containerd container factory successfully Jul 2 01:51:11.404000 audit[2253]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.404000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffed3cafa0 a2=0 a3=1 items=0 ppid=2239 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 01:51:11.406000 audit[2255]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.406000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff8ad6620 a2=0 a3=1 items=0 ppid=2239 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.406000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 01:51:11.503612 kubelet[2239]: I0702 01:51:11.503580 2239 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 01:51:11.503612 kubelet[2239]: I0702 01:51:11.503607 2239 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 01:51:11.503612 kubelet[2239]: I0702 01:51:11.503624 2239 state_mem.go:36] "Initialized new in-memory state store" Jul 2 01:51:11.504500 kubelet[2239]: I0702 01:51:11.504485 2239 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.504960 kubelet[2239]: E0702 01:51:11.504930 2239 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.200.20.39:6443/api/v1/nodes\": dial tcp 10.200.20.39:6443: connect: connection refused" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.604377 kubelet[2239]: E0702 01:51:11.603542 2239 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": dial tcp 10.200.20.39:6443: connect: connection refused" interval="400ms" Jul 2 01:51:11.643000 audit[2261]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.643000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff2c0f0e0 a2=0 a3=1 items=0 ppid=2239 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 01:51:11.645000 audit[2264]: NETFILTER_CFG table=mangle:34 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.645000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc68cddd0 a2=0 a3=1 items=0 ppid=2239 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 01:51:11.645000 audit[2263]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:11.645000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffed2aa10 a2=0 a3=1 items=0 ppid=2239 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 01:51:11.647000 audit[2266]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:11.647000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcbabfa60 a2=0 a3=1 items=0 ppid=2239 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 01:51:11.647000 audit[2265]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.647000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff195b840 a2=0 a3=1 items=0 ppid=2239 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 01:51:11.648000 audit[2268]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:11.648000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffedffebe0 a2=0 a3=1 items=0 ppid=2239 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 01:51:11.648000 audit[2267]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:11.648000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffca7344d0 a2=0 a3=1 items=0 ppid=2239 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 01:51:11.649000 audit[2270]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:11.649000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff7cc2940 a2=0 a3=1 items=0 ppid=2239 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 01:51:11.835423 kubelet[2239]: I0702 01:51:11.645451 2239 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 01:51:11.835423 kubelet[2239]: I0702 01:51:11.646926 2239 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 01:51:11.835423 kubelet[2239]: I0702 01:51:11.646947 2239 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 01:51:11.835423 kubelet[2239]: I0702 01:51:11.646963 2239 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 01:51:11.835423 kubelet[2239]: E0702 01:51:11.647005 2239 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 01:51:11.835423 kubelet[2239]: W0702 01:51:11.647521 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.200.20.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.835423 kubelet[2239]: E0702 01:51:11.647668 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:11.835423 kubelet[2239]: I0702 01:51:11.706844 2239 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.835423 kubelet[2239]: E0702 01:51:11.707245 2239 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.200.20.39:6443/api/v1/nodes\": dial tcp 10.200.20.39:6443: connect: connection refused" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.835423 kubelet[2239]: E0702 01:51:11.747349 2239 kubelet.go:2353] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 01:51:11.837384 kubelet[2239]: I0702 01:51:11.837357 2239 policy_none.go:49] "None policy: Start" Jul 2 01:51:11.838196 kubelet[2239]: I0702 01:51:11.838171 2239 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 01:51:11.838300 kubelet[2239]: I0702 01:51:11.838218 2239 state_mem.go:35] "Initializing new in-memory state store" Jul 2 01:51:11.846367 systemd[1]: Created slice kubepods.slice. Jul 2 01:51:11.850881 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 01:51:11.859473 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 01:51:11.861412 kubelet[2239]: I0702 01:51:11.861377 2239 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 01:51:11.860000 audit[2239]: AVC avc: denied { mac_admin } for pid=2239 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:11.860000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:11.860000 audit[2239]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f9c150 a1=4000e77cf8 a2=4000f9c120 a3=25 items=0 ppid=1 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:11.860000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:11.861680 kubelet[2239]: I0702 01:51:11.861469 2239 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 01:51:11.861680 kubelet[2239]: I0702 01:51:11.861653 2239 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 01:51:11.868823 kubelet[2239]: E0702 01:51:11.868790 2239 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.5-a-b4a22a1448\" not found" Jul 2 01:51:11.947937 kubelet[2239]: I0702 01:51:11.947895 2239 topology_manager.go:215] "Topology Admit Handler" podUID="33272e8a421ce9e61fcba06f7ae2c5fe" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.949377 kubelet[2239]: I0702 01:51:11.949347 2239 topology_manager.go:215] "Topology Admit Handler" podUID="e5d2fe6c6a698b94221b2fcb484d4132" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.950676 kubelet[2239]: I0702 01:51:11.950625 2239 topology_manager.go:215] "Topology Admit Handler" podUID="98f404d85f11cd517b006747e483467e" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:11.958664 systemd[1]: Created slice kubepods-burstable-pode5d2fe6c6a698b94221b2fcb484d4132.slice. Jul 2 01:51:11.968829 systemd[1]: Created slice kubepods-burstable-pod33272e8a421ce9e61fcba06f7ae2c5fe.slice. Jul 2 01:51:11.972498 systemd[1]: Created slice kubepods-burstable-pod98f404d85f11cd517b006747e483467e.slice. Jul 2 01:51:12.004343 kubelet[2239]: E0702 01:51:12.004297 2239 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": dial tcp 10.200.20.39:6443: connect: connection refused" interval="800ms" Jul 2 01:51:12.103771 kubelet[2239]: I0702 01:51:12.103734 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.103903 kubelet[2239]: I0702 01:51:12.103792 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/33272e8a421ce9e61fcba06f7ae2c5fe-kubeconfig\") pod \"kube-scheduler-ci-3510.3.5-a-b4a22a1448\" (UID: \"33272e8a421ce9e61fcba06f7ae2c5fe\") " pod="kube-system/kube-scheduler-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.103903 kubelet[2239]: I0702 01:51:12.103815 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-ca-certs\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.103903 kubelet[2239]: I0702 01:51:12.103835 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-k8s-certs\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.103903 kubelet[2239]: I0702 01:51:12.103868 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.103903 kubelet[2239]: I0702 01:51:12.103891 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.104017 kubelet[2239]: I0702 01:51:12.103915 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.104017 kubelet[2239]: I0702 01:51:12.103946 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.104017 kubelet[2239]: I0702 01:51:12.103966 2239 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.110597 kubelet[2239]: I0702 01:51:12.109596 2239 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.110807 kubelet[2239]: E0702 01:51:12.110790 2239 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.200.20.39:6443/api/v1/nodes\": dial tcp 10.200.20.39:6443: connect: connection refused" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.270153 env[1474]: time="2024-07-02T01:51:12.269891901Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.5-a-b4a22a1448,Uid:e5d2fe6c6a698b94221b2fcb484d4132,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:12.272299 env[1474]: time="2024-07-02T01:51:12.272171802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.5-a-b4a22a1448,Uid:33272e8a421ce9e61fcba06f7ae2c5fe,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:12.276273 env[1474]: time="2024-07-02T01:51:12.276238416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.5-a-b4a22a1448,Uid:98f404d85f11cd517b006747e483467e,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:12.375573 kubelet[2239]: W0702 01:51:12.374967 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.200.20.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.5-a-b4a22a1448&limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.375573 kubelet[2239]: E0702 01:51:12.375074 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.5-a-b4a22a1448&limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.500607 kubelet[2239]: W0702 01:51:12.500549 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://10.200.20.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.500607 kubelet[2239]: E0702 01:51:12.500610 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.561301 kubelet[2239]: W0702 01:51:12.561215 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.200.20.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.561301 kubelet[2239]: E0702 01:51:12.561273 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:12.804837 kubelet[2239]: E0702 01:51:12.804796 2239 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": dial tcp 10.200.20.39:6443: connect: connection refused" interval="1.6s" Jul 2 01:51:12.895776 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3238810510.mount: Deactivated successfully. Jul 2 01:51:12.913162 kubelet[2239]: I0702 01:51:12.913129 2239 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.913506 kubelet[2239]: E0702 01:51:12.913484 2239 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.200.20.39:6443/api/v1/nodes\": dial tcp 10.200.20.39:6443: connect: connection refused" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:12.932003 env[1474]: time="2024-07-02T01:51:12.931946106Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.938416 env[1474]: time="2024-07-02T01:51:12.938380140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.951508 env[1474]: time="2024-07-02T01:51:12.951434082Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.956314 env[1474]: time="2024-07-02T01:51:12.956279797Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.962873 env[1474]: time="2024-07-02T01:51:12.962823348Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.967033 env[1474]: time="2024-07-02T01:51:12.966998600Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.970586 env[1474]: time="2024-07-02T01:51:12.970547548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.973824 env[1474]: time="2024-07-02T01:51:12.973793024Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.981551 env[1474]: time="2024-07-02T01:51:12.981505465Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.985302 env[1474]: time="2024-07-02T01:51:12.985254608Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:12.999278 env[1474]: time="2024-07-02T01:51:12.999239446Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:13.011879 env[1474]: time="2024-07-02T01:51:13.011837287Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:13.030353 kubelet[2239]: W0702 01:51:13.030277 2239 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.200.20.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:13.030353 kubelet[2239]: E0702 01:51:13.030355 2239 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.39:6443: connect: connection refused Jul 2 01:51:13.061507 env[1474]: time="2024-07-02T01:51:13.060889490Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:13.061507 env[1474]: time="2024-07-02T01:51:13.060947488Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:13.061507 env[1474]: time="2024-07-02T01:51:13.060957488Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:13.062812 env[1474]: time="2024-07-02T01:51:13.061139843Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf pid=2279 runtime=io.containerd.runc.v2 Jul 2 01:51:13.078729 systemd[1]: Started cri-containerd-9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf.scope. Jul 2 01:51:13.084660 env[1474]: time="2024-07-02T01:51:13.084501414Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:13.084660 env[1474]: time="2024-07-02T01:51:13.084566812Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:13.084660 env[1474]: time="2024-07-02T01:51:13.084589932Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:13.085560 env[1474]: time="2024-07-02T01:51:13.084832406Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f pid=2306 runtime=io.containerd.runc.v2 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.098000 audit: BPF prog-id=59 op=LOAD Jul 2 01:51:13.099000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.099000 audit[2289]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2279 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373934323834373338613064373466346637636239613162623032 Jul 2 01:51:13.099000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.099000 audit[2289]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2279 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373934323834373338613064373466346637636239613162623032 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit: BPF prog-id=60 op=LOAD Jul 2 01:51:13.100000 audit[2289]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2279 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373934323834373338613064373466346637636239613162623032 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.100000 audit: BPF prog-id=61 op=LOAD Jul 2 01:51:13.100000 audit[2289]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2279 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373934323834373338613064373466346637636239613162623032 Jul 2 01:51:13.101000 audit: BPF prog-id=61 op=UNLOAD Jul 2 01:51:13.101000 audit: BPF prog-id=60 op=UNLOAD Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { perfmon } for pid=2289 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit[2289]: AVC avc: denied { bpf } for pid=2289 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.101000 audit: BPF prog-id=62 op=LOAD Jul 2 01:51:13.101000 audit[2289]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2279 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962373934323834373338613064373466346637636239613162623032 Jul 2 01:51:13.107157 systemd[1]: Started cri-containerd-219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f.scope. Jul 2 01:51:13.114220 env[1474]: time="2024-07-02T01:51:13.114134306Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:13.114220 env[1474]: time="2024-07-02T01:51:13.114181185Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:13.114868 env[1474]: time="2024-07-02T01:51:13.114200065Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:13.114868 env[1474]: time="2024-07-02T01:51:13.114816289Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/42a9a2202437bfcd8718946d4c7b3dc385f2989fd8ece85d0a149dff2a46a82e pid=2339 runtime=io.containerd.runc.v2 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.121000 audit: BPF prog-id=63 op=LOAD Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2306 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396631633561616239346633646139333162373034626336363532 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2306 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396631633561616239346633646139333162373034626336363532 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.123000 audit: BPF prog-id=64 op=LOAD Jul 2 01:51:13.123000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2306 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396631633561616239346633646139333162373034626336363532 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit: BPF prog-id=65 op=LOAD Jul 2 01:51:13.124000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2306 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396631633561616239346633646139333162373034626336363532 Jul 2 01:51:13.124000 audit: BPF prog-id=65 op=UNLOAD Jul 2 01:51:13.124000 audit: BPF prog-id=64 op=UNLOAD Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.124000 audit: BPF prog-id=66 op=LOAD Jul 2 01:51:13.124000 audit[2323]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2306 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396631633561616239346633646139333162373034626336363532 Jul 2 01:51:13.137610 systemd[1]: Started cri-containerd-42a9a2202437bfcd8718946d4c7b3dc385f2989fd8ece85d0a149dff2a46a82e.scope. Jul 2 01:51:13.145458 env[1474]: time="2024-07-02T01:51:13.145418517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.5-a-b4a22a1448,Uid:33272e8a421ce9e61fcba06f7ae2c5fe,Namespace:kube-system,Attempt:0,} returns sandbox id \"9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf\"" Jul 2 01:51:13.152477 env[1474]: time="2024-07-02T01:51:13.152420340Z" level=info msg="CreateContainer within sandbox \"9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.159000 audit: BPF prog-id=67 op=LOAD Jul 2 01:51:13.160000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.160000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2339 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432613961323230323433376266636438373138393436643463376233 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2339 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432613961323230323433376266636438373138393436643463376233 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.161000 audit: BPF prog-id=68 op=LOAD Jul 2 01:51:13.161000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2339 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432613961323230323433376266636438373138393436643463376233 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.162000 audit: BPF prog-id=69 op=LOAD Jul 2 01:51:13.162000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2339 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432613961323230323433376266636438373138393436643463376233 Jul 2 01:51:13.163000 audit: BPF prog-id=69 op=UNLOAD Jul 2 01:51:13.163000 audit: BPF prog-id=68 op=UNLOAD Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { perfmon } for pid=2353 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit[2353]: AVC avc: denied { bpf } for pid=2353 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.163000 audit: BPF prog-id=70 op=LOAD Jul 2 01:51:13.163000 audit[2353]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2339 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432613961323230323433376266636438373138393436643463376233 Jul 2 01:51:13.171502 env[1474]: time="2024-07-02T01:51:13.171463460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.5-a-b4a22a1448,Uid:98f404d85f11cd517b006747e483467e,Namespace:kube-system,Attempt:0,} returns sandbox id \"219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f\"" Jul 2 01:51:13.174398 env[1474]: time="2024-07-02T01:51:13.174364787Z" level=info msg="CreateContainer within sandbox \"219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 01:51:13.191128 env[1474]: time="2024-07-02T01:51:13.191082125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.5-a-b4a22a1448,Uid:e5d2fe6c6a698b94221b2fcb484d4132,Namespace:kube-system,Attempt:0,} returns sandbox id \"42a9a2202437bfcd8718946d4c7b3dc385f2989fd8ece85d0a149dff2a46a82e\"" Jul 2 01:51:13.198988 env[1474]: time="2024-07-02T01:51:13.198948526Z" level=info msg="CreateContainer within sandbox \"42a9a2202437bfcd8718946d4c7b3dc385f2989fd8ece85d0a149dff2a46a82e\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 01:51:13.218251 env[1474]: time="2024-07-02T01:51:13.218197641Z" level=info msg="CreateContainer within sandbox \"9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9\"" Jul 2 01:51:13.218864 env[1474]: time="2024-07-02T01:51:13.218838664Z" level=info msg="StartContainer for \"a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9\"" Jul 2 01:51:13.237594 systemd[1]: Started cri-containerd-a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9.scope. Jul 2 01:51:13.245459 env[1474]: time="2024-07-02T01:51:13.245416834Z" level=info msg="CreateContainer within sandbox \"219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370\"" Jul 2 01:51:13.246084 env[1474]: time="2024-07-02T01:51:13.246057258Z" level=info msg="StartContainer for \"42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370\"" Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.251000 audit: BPF prog-id=71 op=LOAD Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2279 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633164326262663666363764396162393730666136373361616539 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2279 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633164326262663666363764396162393730666136373361616539 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.252000 audit: BPF prog-id=72 op=LOAD Jul 2 01:51:13.252000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2279 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633164326262663666363764396162393730666136373361616539 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit: BPF prog-id=73 op=LOAD Jul 2 01:51:13.253000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2279 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633164326262663666363764396162393730666136373361616539 Jul 2 01:51:13.253000 audit: BPF prog-id=73 op=UNLOAD Jul 2 01:51:13.253000 audit: BPF prog-id=72 op=UNLOAD Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.253000 audit: BPF prog-id=74 op=LOAD Jul 2 01:51:13.253000 audit[2406]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2279 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135633164326262663666363764396162393730666136373361616539 Jul 2 01:51:13.266888 env[1474]: time="2024-07-02T01:51:13.266831014Z" level=info msg="CreateContainer within sandbox \"42a9a2202437bfcd8718946d4c7b3dc385f2989fd8ece85d0a149dff2a46a82e\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d4348217e617e156cdee4354aa37c9d779d1aa7aca3f5003b2f9d86d8353e06c\"" Jul 2 01:51:13.267932 env[1474]: time="2024-07-02T01:51:13.267902746Z" level=info msg="StartContainer for \"d4348217e617e156cdee4354aa37c9d779d1aa7aca3f5003b2f9d86d8353e06c\"" Jul 2 01:51:13.268858 systemd[1]: Started cri-containerd-42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370.scope. Jul 2 01:51:13.291846 systemd[1]: Started cri-containerd-d4348217e617e156cdee4354aa37c9d779d1aa7aca3f5003b2f9d86d8353e06c.scope. Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit: BPF prog-id=75 op=LOAD Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2306 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653662613934623162633063643731363733336233666630373938 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2306 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653662613934623162633063643731363733336233666630373938 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit: BPF prog-id=76 op=LOAD Jul 2 01:51:13.295000 audit[2430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2306 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653662613934623162633063643731363733336233666630373938 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit: BPF prog-id=77 op=LOAD Jul 2 01:51:13.295000 audit[2430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2306 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653662613934623162633063643731363733336233666630373938 Jul 2 01:51:13.295000 audit: BPF prog-id=77 op=UNLOAD Jul 2 01:51:13.295000 audit: BPF prog-id=76 op=UNLOAD Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { perfmon } for pid=2430 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit[2430]: AVC avc: denied { bpf } for pid=2430 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.295000 audit: BPF prog-id=78 op=LOAD Jul 2 01:51:13.295000 audit[2430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2306 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432653662613934623162633063643731363733336233666630373938 Jul 2 01:51:13.304071 env[1474]: time="2024-07-02T01:51:13.304009195Z" level=info msg="StartContainer for \"a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9\" returns successfully" Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.318000 audit: BPF prog-id=79 op=LOAD Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2339 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333438323137653631376531353663646565343335346161333763 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2339 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333438323137653631376531353663646565343335346161333763 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit: BPF prog-id=80 op=LOAD Jul 2 01:51:13.319000 audit[2450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2339 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333438323137653631376531353663646565343335346161333763 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit: BPF prog-id=81 op=LOAD Jul 2 01:51:13.319000 audit[2450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2339 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333438323137653631376531353663646565343335346161333763 Jul 2 01:51:13.319000 audit: BPF prog-id=81 op=UNLOAD Jul 2 01:51:13.319000 audit: BPF prog-id=80 op=UNLOAD Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { perfmon } for pid=2450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit[2450]: AVC avc: denied { bpf } for pid=2450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:13.319000 audit: BPF prog-id=82 op=LOAD Jul 2 01:51:13.319000 audit[2450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2339 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434333438323137653631376531353663646565343335346161333763 Jul 2 01:51:13.348553 env[1474]: time="2024-07-02T01:51:13.348506833Z" level=info msg="StartContainer for \"42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370\" returns successfully" Jul 2 01:51:13.373546 env[1474]: time="2024-07-02T01:51:13.373497322Z" level=info msg="StartContainer for \"d4348217e617e156cdee4354aa37c9d779d1aa7aca3f5003b2f9d86d8353e06c\" returns successfully" Jul 2 01:51:14.515775 kubelet[2239]: I0702 01:51:14.515749 2239 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:15.288000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.294529 kernel: kauditd_printk_skb: 637 callbacks suppressed Jul 2 01:51:15.294655 kernel: audit: type=1400 audit(1719885075.288:531): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.288000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40008cb5c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:15.348223 kernel: audit: type=1300 audit(1719885075.288:531): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40008cb5c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:15.288000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:15.371766 kernel: audit: type=1327 audit(1719885075.288:531): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:15.371896 kernel: audit: type=1400 audit(1719885075.315:532): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.315000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.315000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000fc5c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:15.423346 kernel: audit: type=1300 audit(1719885075.315:532): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000fc5c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:15.315000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:15.447387 kernel: audit: type=1327 audit(1719885075.315:532): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:15.667000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.668000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.728672 kernel: audit: type=1400 audit(1719885075.667:533): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.728803 kernel: audit: type=1400 audit(1719885075.668:534): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.668000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003ee9290 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.776802 kernel: audit: type=1300 audit(1719885075.668:534): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003ee9290 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.668000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.805660 kernel: audit: type=1327 audit(1719885075.668:534): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.676000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.676000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4003ee9800 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.667000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40040d2d20 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.667000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.689000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.689000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4002f81100 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.689000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.764000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.764000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004013ca0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.764000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:15.764000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40044403f0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:51:15.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:51:15.839019 kubelet[2239]: E0702 01:51:15.838980 2239 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.5-a-b4a22a1448\" not found" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:15.915777 kubelet[2239]: I0702 01:51:15.915741 2239 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:16.389132 kubelet[2239]: I0702 01:51:16.389094 2239 apiserver.go:52] "Watching apiserver" Jul 2 01:51:16.402836 kubelet[2239]: I0702 01:51:16.402802 2239 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 01:51:18.513093 kubelet[2239]: W0702 01:51:18.513068 2239 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 01:51:18.677037 systemd[1]: Reloading. Jul 2 01:51:18.771138 /usr/lib/systemd/system-generators/torcx-generator[2529]: time="2024-07-02T01:51:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 01:51:18.771172 /usr/lib/systemd/system-generators/torcx-generator[2529]: time="2024-07-02T01:51:18Z" level=info msg="torcx already run" Jul 2 01:51:18.850167 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 01:51:18.850351 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 01:51:18.865932 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 01:51:18.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.948000 audit: BPF prog-id=83 op=LOAD Jul 2 01:51:18.948000 audit: BPF prog-id=59 op=UNLOAD Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.949000 audit: BPF prog-id=84 op=LOAD Jul 2 01:51:18.950000 audit: BPF prog-id=44 op=UNLOAD Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.950000 audit: BPF prog-id=85 op=LOAD Jul 2 01:51:18.951000 audit: BPF prog-id=75 op=UNLOAD Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit: BPF prog-id=86 op=LOAD Jul 2 01:51:18.951000 audit: BPF prog-id=45 op=UNLOAD Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit: BPF prog-id=87 op=LOAD Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit: BPF prog-id=88 op=LOAD Jul 2 01:51:18.952000 audit: BPF prog-id=46 op=UNLOAD Jul 2 01:51:18.952000 audit: BPF prog-id=47 op=UNLOAD Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.953000 audit: BPF prog-id=89 op=LOAD Jul 2 01:51:18.954000 audit: BPF prog-id=79 op=UNLOAD Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit: BPF prog-id=90 op=LOAD Jul 2 01:51:18.955000 audit: BPF prog-id=71 op=UNLOAD Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.956000 audit: BPF prog-id=91 op=LOAD Jul 2 01:51:18.956000 audit: BPF prog-id=48 op=UNLOAD Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.957000 audit: BPF prog-id=92 op=LOAD Jul 2 01:51:18.958000 audit: BPF prog-id=67 op=UNLOAD Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.959000 audit: BPF prog-id=93 op=LOAD Jul 2 01:51:18.959000 audit: BPF prog-id=49 op=UNLOAD Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.960000 audit: BPF prog-id=94 op=LOAD Jul 2 01:51:18.961000 audit: BPF prog-id=50 op=UNLOAD Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit: BPF prog-id=95 op=LOAD Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit: BPF prog-id=96 op=LOAD Jul 2 01:51:18.962000 audit: BPF prog-id=51 op=UNLOAD Jul 2 01:51:18.962000 audit: BPF prog-id=52 op=UNLOAD Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.963000 audit: BPF prog-id=97 op=LOAD Jul 2 01:51:18.963000 audit: BPF prog-id=63 op=UNLOAD Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit: BPF prog-id=98 op=LOAD Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.965000 audit: BPF prog-id=99 op=LOAD Jul 2 01:51:18.965000 audit: BPF prog-id=53 op=UNLOAD Jul 2 01:51:18.965000 audit: BPF prog-id=54 op=UNLOAD Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.966000 audit: BPF prog-id=100 op=LOAD Jul 2 01:51:18.966000 audit: BPF prog-id=55 op=UNLOAD Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.967000 audit: BPF prog-id=101 op=LOAD Jul 2 01:51:18.967000 audit: BPF prog-id=56 op=UNLOAD Jul 2 01:51:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit: BPF prog-id=102 op=LOAD Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:18.968000 audit: BPF prog-id=103 op=LOAD Jul 2 01:51:18.968000 audit: BPF prog-id=57 op=UNLOAD Jul 2 01:51:18.968000 audit: BPF prog-id=58 op=UNLOAD Jul 2 01:51:18.989228 systemd[1]: Stopping kubelet.service... Jul 2 01:51:19.010593 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 01:51:19.010766 systemd[1]: Stopped kubelet.service. Jul 2 01:51:19.010817 systemd[1]: kubelet.service: Consumed 1.301s CPU time. Jul 2 01:51:19.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:19.012416 systemd[1]: Starting kubelet.service... Jul 2 01:51:19.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:19.152463 systemd[1]: Started kubelet.service. Jul 2 01:51:19.226670 kubelet[2593]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 01:51:19.227008 kubelet[2593]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 01:51:19.227064 kubelet[2593]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 01:51:19.227193 kubelet[2593]: I0702 01:51:19.227161 2593 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 01:51:19.231689 kubelet[2593]: I0702 01:51:19.231662 2593 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 01:51:19.231689 kubelet[2593]: I0702 01:51:19.231685 2593 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 01:51:19.231864 kubelet[2593]: I0702 01:51:19.231845 2593 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 01:51:19.233284 kubelet[2593]: I0702 01:51:19.233254 2593 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 01:51:19.234993 kubelet[2593]: I0702 01:51:19.234974 2593 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 01:51:19.242688 kubelet[2593]: I0702 01:51:19.242662 2593 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 01:51:19.242910 kubelet[2593]: I0702 01:51:19.242891 2593 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 01:51:19.243065 kubelet[2593]: I0702 01:51:19.243046 2593 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 01:51:19.243140 kubelet[2593]: I0702 01:51:19.243071 2593 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 01:51:19.243140 kubelet[2593]: I0702 01:51:19.243081 2593 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 01:51:19.243140 kubelet[2593]: I0702 01:51:19.243110 2593 state_mem.go:36] "Initialized new in-memory state store" Jul 2 01:51:19.243224 kubelet[2593]: I0702 01:51:19.243198 2593 kubelet.go:396] "Attempting to sync node with API server" Jul 2 01:51:19.243224 kubelet[2593]: I0702 01:51:19.243212 2593 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 01:51:19.243269 kubelet[2593]: I0702 01:51:19.243232 2593 kubelet.go:312] "Adding apiserver pod source" Jul 2 01:51:19.243269 kubelet[2593]: I0702 01:51:19.243242 2593 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 01:51:19.250368 kubelet[2593]: I0702 01:51:19.248239 2593 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 01:51:19.250368 kubelet[2593]: I0702 01:51:19.248422 2593 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 01:51:19.250368 kubelet[2593]: I0702 01:51:19.248732 2593 server.go:1256] "Started kubelet" Jul 2 01:51:19.252000 audit[2593]: AVC avc: denied { mac_admin } for pid=2593 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:19.252000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:19.252000 audit[2593]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008793b0 a1=4000be2498 a2=4000879380 a3=25 items=0 ppid=1 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:19.252000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:19.252000 audit[2593]: AVC avc: denied { mac_admin } for pid=2593 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:19.252000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:19.252000 audit[2593]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008510e0 a1=4000be24b0 a2=4000879440 a3=25 items=0 ppid=1 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:19.252000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:19.256791 kubelet[2593]: I0702 01:51:19.253433 2593 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 01:51:19.256791 kubelet[2593]: I0702 01:51:19.253466 2593 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 01:51:19.256791 kubelet[2593]: I0702 01:51:19.253527 2593 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 01:51:19.257457 kubelet[2593]: I0702 01:51:19.257434 2593 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 01:51:19.258131 kubelet[2593]: I0702 01:51:19.258110 2593 server.go:461] "Adding debug handlers to kubelet server" Jul 2 01:51:19.259012 kubelet[2593]: I0702 01:51:19.258995 2593 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 01:51:19.259154 kubelet[2593]: I0702 01:51:19.259138 2593 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 01:51:19.263082 kubelet[2593]: I0702 01:51:19.263045 2593 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 01:51:19.268325 kubelet[2593]: I0702 01:51:19.268298 2593 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 01:51:19.268483 kubelet[2593]: I0702 01:51:19.268465 2593 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 01:51:19.272513 kubelet[2593]: I0702 01:51:19.272486 2593 factory.go:221] Registration of the systemd container factory successfully Jul 2 01:51:19.272753 kubelet[2593]: I0702 01:51:19.272735 2593 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 01:51:19.279388 kubelet[2593]: I0702 01:51:19.274655 2593 factory.go:221] Registration of the containerd container factory successfully Jul 2 01:51:19.282974 kubelet[2593]: I0702 01:51:19.282941 2593 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 01:51:19.284451 kubelet[2593]: I0702 01:51:19.284426 2593 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 01:51:19.284451 kubelet[2593]: I0702 01:51:19.284453 2593 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 01:51:19.284559 kubelet[2593]: I0702 01:51:19.284473 2593 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 01:51:19.284559 kubelet[2593]: E0702 01:51:19.284522 2593 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 01:51:19.305028 kubelet[2593]: E0702 01:51:19.304993 2593 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 01:51:19.337488 kubelet[2593]: I0702 01:51:19.337465 2593 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 01:51:19.337624 kubelet[2593]: I0702 01:51:19.337614 2593 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 01:51:19.337709 kubelet[2593]: I0702 01:51:19.337700 2593 state_mem.go:36] "Initialized new in-memory state store" Jul 2 01:51:19.337901 kubelet[2593]: I0702 01:51:19.337890 2593 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 01:51:19.337978 kubelet[2593]: I0702 01:51:19.337968 2593 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 01:51:19.338038 kubelet[2593]: I0702 01:51:19.338029 2593 policy_none.go:49] "None policy: Start" Jul 2 01:51:19.338686 kubelet[2593]: I0702 01:51:19.338672 2593 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 01:51:19.338825 kubelet[2593]: I0702 01:51:19.338814 2593 state_mem.go:35] "Initializing new in-memory state store" Jul 2 01:51:19.339043 kubelet[2593]: I0702 01:51:19.339032 2593 state_mem.go:75] "Updated machine memory state" Jul 2 01:51:19.343191 kubelet[2593]: I0702 01:51:19.343175 2593 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 01:51:19.341000 audit[2593]: AVC avc: denied { mac_admin } for pid=2593 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:19.341000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 01:51:19.341000 audit[2593]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009c4240 a1=4000ea5170 a2=40009c4210 a3=25 items=0 ppid=1 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:19.341000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 01:51:19.343588 kubelet[2593]: I0702 01:51:19.343577 2593 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 01:51:19.343830 kubelet[2593]: I0702 01:51:19.343817 2593 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 01:51:19.365610 kubelet[2593]: I0702 01:51:19.365590 2593 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.372722 kubelet[2593]: I0702 01:51:19.372689 2593 kubelet_node_status.go:112] "Node was previously registered" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.372930 kubelet[2593]: I0702 01:51:19.372919 2593 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.385493 kubelet[2593]: I0702 01:51:19.385463 2593 topology_manager.go:215] "Topology Admit Handler" podUID="33272e8a421ce9e61fcba06f7ae2c5fe" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.386538 kubelet[2593]: I0702 01:51:19.386521 2593 topology_manager.go:215] "Topology Admit Handler" podUID="e5d2fe6c6a698b94221b2fcb484d4132" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.386676 kubelet[2593]: I0702 01:51:19.386656 2593 topology_manager.go:215] "Topology Admit Handler" podUID="98f404d85f11cd517b006747e483467e" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.392396 kubelet[2593]: W0702 01:51:19.392381 2593 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 01:51:19.400909 kubelet[2593]: W0702 01:51:19.400887 2593 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 01:51:19.401417 kubelet[2593]: W0702 01:51:19.401401 2593 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 01:51:19.401560 kubelet[2593]: E0702 01:51:19.401547 2593 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569270 kubelet[2593]: I0702 01:51:19.569236 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569506 kubelet[2593]: I0702 01:51:19.569493 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569593 kubelet[2593]: I0702 01:51:19.569582 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569670 kubelet[2593]: I0702 01:51:19.569660 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569742 kubelet[2593]: I0702 01:51:19.569733 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569809 kubelet[2593]: I0702 01:51:19.569801 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/98f404d85f11cd517b006747e483467e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.5-a-b4a22a1448\" (UID: \"98f404d85f11cd517b006747e483467e\") " pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569889 kubelet[2593]: I0702 01:51:19.569880 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/33272e8a421ce9e61fcba06f7ae2c5fe-kubeconfig\") pod \"kube-scheduler-ci-3510.3.5-a-b4a22a1448\" (UID: \"33272e8a421ce9e61fcba06f7ae2c5fe\") " pod="kube-system/kube-scheduler-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.569958 kubelet[2593]: I0702 01:51:19.569949 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-ca-certs\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:19.570030 kubelet[2593]: I0702 01:51:19.570021 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e5d2fe6c6a698b94221b2fcb484d4132-k8s-certs\") pod \"kube-apiserver-ci-3510.3.5-a-b4a22a1448\" (UID: \"e5d2fe6c6a698b94221b2fcb484d4132\") " pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" Jul 2 01:51:20.243817 kubelet[2593]: I0702 01:51:20.243760 2593 apiserver.go:52] "Watching apiserver" Jul 2 01:51:20.268929 kubelet[2593]: I0702 01:51:20.268884 2593 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 01:51:20.427000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.433979 kernel: kauditd_printk_skb: 272 callbacks suppressed Jul 2 01:51:20.434096 kernel: audit: type=1400 audit(1719885080.427:788): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.427000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ba95a0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.496144 kernel: audit: type=1300 audit(1719885080.427:788): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ba95a0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.496823 kubelet[2593]: I0702 01:51:20.496788 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.5-a-b4a22a1448" podStartSLOduration=1.496745457 podStartE2EDuration="1.496745457s" podCreationTimestamp="2024-07-02 01:51:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:51:20.408524025 +0000 UTC m=+1.245960596" watchObservedRunningTime="2024-07-02 01:51:20.496745457 +0000 UTC m=+1.334182028" Jul 2 01:51:20.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.520852 kernel: audit: type=1327 audit(1719885080.427:788): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.459000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.545653 kernel: audit: type=1400 audit(1719885080.459:789): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.459000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ba9740 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.575310 kernel: audit: type=1300 audit(1719885080.459:789): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ba9740 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.576216 kubelet[2593]: I0702 01:51:20.576187 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.5-a-b4a22a1448" podStartSLOduration=1.576136158 podStartE2EDuration="1.576136158s" podCreationTimestamp="2024-07-02 01:51:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:51:20.497229767 +0000 UTC m=+1.334666338" watchObservedRunningTime="2024-07-02 01:51:20.576136158 +0000 UTC m=+1.413572729" Jul 2 01:51:20.606891 kernel: audit: type=1327 audit(1719885080.459:789): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.459000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.460000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.633322 kernel: audit: type=1400 audit(1719885080.460:790): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.633909 kubelet[2593]: I0702 01:51:20.633881 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.5-a-b4a22a1448" podStartSLOduration=2.6338457220000002 podStartE2EDuration="2.633845722s" podCreationTimestamp="2024-07-02 01:51:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:51:20.577042298 +0000 UTC m=+1.414478909" watchObservedRunningTime="2024-07-02 01:51:20.633845722 +0000 UTC m=+1.471282293" Jul 2 01:51:20.460000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ba9a60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.666903 kernel: audit: type=1300 audit(1719885080.460:790): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ba9a60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.460000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.689877 kernel: audit: type=1327 audit(1719885080.460:790): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.711149 kernel: audit: type=1400 audit(1719885080.461:791): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:51:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c099e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:23.909582 sudo[1894]: pam_unix(sudo:session): session closed for user root Jul 2 01:51:23.908000 audit[1894]: USER_END pid=1894 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:51:23.908000 audit[1894]: CRED_DISP pid=1894 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 01:51:23.976000 audit[1889]: USER_END pid=1889 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:51:23.976000 audit[1889]: CRED_DISP pid=1889 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:51:23.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.39:22-10.200.16.10:57760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:51:23.976606 sshd[1889]: pam_unix(sshd:session): session closed for user core Jul 2 01:51:23.979609 systemd[1]: sshd@6-10.200.20.39:22-10.200.16.10:57760.service: Deactivated successfully. Jul 2 01:51:23.980323 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 01:51:23.980493 systemd[1]: session-9.scope: Consumed 5.915s CPU time. Jul 2 01:51:23.980952 systemd-logind[1463]: Session 9 logged out. Waiting for processes to exit. Jul 2 01:51:23.981708 systemd-logind[1463]: Removed session 9. Jul 2 01:51:30.618000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521013 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 01:51:30.624276 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 01:51:30.624375 kernel: audit: type=1400 audit(1719885090.618:797): avc: denied { watch } for pid=2449 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521013 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 01:51:30.618000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000db6880 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:30.674841 kernel: audit: type=1300 audit(1719885090.618:797): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000db6880 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:51:30.674982 kernel: audit: type=1327 audit(1719885090.618:797): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:30.618000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:51:34.049644 kubelet[2593]: I0702 01:51:34.049580 2593 kuberuntime_manager.go:1529] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 01:51:34.050266 env[1474]: time="2024-07-02T01:51:34.050227489Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 01:51:34.050564 kubelet[2593]: I0702 01:51:34.050430 2593 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 01:51:34.867154 kubelet[2593]: I0702 01:51:34.867113 2593 topology_manager.go:215] "Topology Admit Handler" podUID="df026988-4a56-4deb-97c1-0602930585fc" podNamespace="kube-system" podName="kube-proxy-rp4j7" Jul 2 01:51:34.872775 systemd[1]: Created slice kubepods-besteffort-poddf026988_4a56_4deb_97c1_0602930585fc.slice. Jul 2 01:51:34.977593 kubelet[2593]: I0702 01:51:34.977563 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/df026988-4a56-4deb-97c1-0602930585fc-kube-proxy\") pod \"kube-proxy-rp4j7\" (UID: \"df026988-4a56-4deb-97c1-0602930585fc\") " pod="kube-system/kube-proxy-rp4j7" Jul 2 01:51:34.977714 kubelet[2593]: I0702 01:51:34.977602 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/df026988-4a56-4deb-97c1-0602930585fc-xtables-lock\") pod \"kube-proxy-rp4j7\" (UID: \"df026988-4a56-4deb-97c1-0602930585fc\") " pod="kube-system/kube-proxy-rp4j7" Jul 2 01:51:34.977714 kubelet[2593]: I0702 01:51:34.977626 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6pxf7\" (UniqueName: \"kubernetes.io/projected/df026988-4a56-4deb-97c1-0602930585fc-kube-api-access-6pxf7\") pod \"kube-proxy-rp4j7\" (UID: \"df026988-4a56-4deb-97c1-0602930585fc\") " pod="kube-system/kube-proxy-rp4j7" Jul 2 01:51:34.977714 kubelet[2593]: I0702 01:51:34.977648 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/df026988-4a56-4deb-97c1-0602930585fc-lib-modules\") pod \"kube-proxy-rp4j7\" (UID: \"df026988-4a56-4deb-97c1-0602930585fc\") " pod="kube-system/kube-proxy-rp4j7" Jul 2 01:51:35.180061 env[1474]: time="2024-07-02T01:51:35.179958037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rp4j7,Uid:df026988-4a56-4deb-97c1-0602930585fc,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:35.231726 env[1474]: time="2024-07-02T01:51:35.231667712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:35.231897 env[1474]: time="2024-07-02T01:51:35.231867908Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:35.232012 env[1474]: time="2024-07-02T01:51:35.231990507Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:35.232269 env[1474]: time="2024-07-02T01:51:35.232220503Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943 pid=2679 runtime=io.containerd.runc.v2 Jul 2 01:51:35.245836 systemd[1]: run-containerd-runc-k8s.io-f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943-runc.5payIW.mount: Deactivated successfully. Jul 2 01:51:35.255187 systemd[1]: Started cri-containerd-f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943.scope. Jul 2 01:51:35.267886 kubelet[2593]: I0702 01:51:35.267840 2593 topology_manager.go:215] "Topology Admit Handler" podUID="a6046424-72b9-4d6e-b481-a2091e272535" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-pfqrm" Jul 2 01:51:35.272473 systemd[1]: Created slice kubepods-besteffort-poda6046424_72b9_4d6e_b481_a2091e272535.slice. Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.327092 kernel: audit: type=1400 audit(1719885095.290:798): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.327200 kernel: audit: type=1400 audit(1719885095.290:799): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.343307 kernel: audit: type=1400 audit(1719885095.290:800): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.360204 kernel: audit: type=1400 audit(1719885095.290:801): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.377207 kernel: audit: type=1400 audit(1719885095.290:802): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.379809 kubelet[2593]: I0702 01:51:35.379772 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a6046424-72b9-4d6e-b481-a2091e272535-var-lib-calico\") pod \"tigera-operator-76c4974c85-pfqrm\" (UID: \"a6046424-72b9-4d6e-b481-a2091e272535\") " pod="tigera-operator/tigera-operator-76c4974c85-pfqrm" Jul 2 01:51:35.379809 kubelet[2593]: I0702 01:51:35.379816 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mg778\" (UniqueName: \"kubernetes.io/projected/a6046424-72b9-4d6e-b481-a2091e272535-kube-api-access-mg778\") pod \"tigera-operator-76c4974c85-pfqrm\" (UID: \"a6046424-72b9-4d6e-b481-a2091e272535\") " pod="tigera-operator/tigera-operator-76c4974c85-pfqrm" Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.397521 kernel: audit: type=1400 audit(1719885095.290:803): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.399956 env[1474]: time="2024-07-02T01:51:35.399897691Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rp4j7,Uid:df026988-4a56-4deb-97c1-0602930585fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943\"" Jul 2 01:51:35.405161 env[1474]: time="2024-07-02T01:51:35.405089570Z" level=info msg="CreateContainer within sandbox \"f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 01:51:35.414483 kernel: audit: type=1400 audit(1719885095.290:804): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit: BPF prog-id=104 op=LOAD Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633313534646564326231363761373132316362616262616530396162 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633313534646564326231363761373132316362616262616530396162 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit: BPF prog-id=105 op=LOAD Jul 2 01:51:35.308000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633313534646564326231363761373132316362616262616530396162 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit: BPF prog-id=106 op=LOAD Jul 2 01:51:35.308000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633313534646564326231363761373132316362616262616530396162 Jul 2 01:51:35.308000 audit: BPF prog-id=106 op=UNLOAD Jul 2 01:51:35.308000 audit: BPF prog-id=105 op=UNLOAD Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.308000 audit: BPF prog-id=107 op=LOAD Jul 2 01:51:35.308000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633313534646564326231363761373132316362616262616530396162 Jul 2 01:51:35.452370 env[1474]: time="2024-07-02T01:51:35.451083773Z" level=info msg="CreateContainer within sandbox \"f3154ded2b167a7121cbabbae09ab93d3c7b7e77af07f2aaf4a81750c5f04943\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"208908dd9201b810b148e206591f1c7ca36ef845cc9fadd17d945bd64aad5f8c\"" Jul 2 01:51:35.454516 env[1474]: time="2024-07-02T01:51:35.454486520Z" level=info msg="StartContainer for \"208908dd9201b810b148e206591f1c7ca36ef845cc9fadd17d945bd64aad5f8c\"" Jul 2 01:51:35.469424 systemd[1]: Started cri-containerd-208908dd9201b810b148e206591f1c7ca36ef845cc9fadd17d945bd64aad5f8c.scope. Jul 2 01:51:35.482000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.482000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2679 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383930386464393230316238313062313438653230363539316631 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit: BPF prog-id=108 op=LOAD Jul 2 01:51:35.483000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2679 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383930386464393230316238313062313438653230363539316631 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.483000 audit: BPF prog-id=109 op=LOAD Jul 2 01:51:35.483000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2679 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383930386464393230316238313062313438653230363539316631 Jul 2 01:51:35.484000 audit: BPF prog-id=109 op=UNLOAD Jul 2 01:51:35.485000 audit: BPF prog-id=108 op=UNLOAD Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.485000 audit: BPF prog-id=110 op=LOAD Jul 2 01:51:35.485000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2679 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383930386464393230316238313062313438653230363539316631 Jul 2 01:51:35.510461 env[1474]: time="2024-07-02T01:51:35.510418289Z" level=info msg="StartContainer for \"208908dd9201b810b148e206591f1c7ca36ef845cc9fadd17d945bd64aad5f8c\" returns successfully" Jul 2 01:51:35.558000 audit[2770]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.558000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed3dd930 a2=0 a3=1 items=0 ppid=2729 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.558000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 01:51:35.562000 audit[2771]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.562000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdadec0b0 a2=0 a3=1 items=0 ppid=2729 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 01:51:35.562000 audit[2772]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.562000 audit[2772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff85bf150 a2=0 a3=1 items=0 ppid=2729 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.562000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 01:51:35.563000 audit[2773]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.563000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0a2ae50 a2=0 a3=1 items=0 ppid=2729 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 01:51:35.564000 audit[2774]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.564000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd396c740 a2=0 a3=1 items=0 ppid=2729 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 01:51:35.565000 audit[2775]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.565000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc0a22d0 a2=0 a3=1 items=0 ppid=2729 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 01:51:35.575587 env[1474]: time="2024-07-02T01:51:35.575555754Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-pfqrm,Uid:a6046424-72b9-4d6e-b481-a2091e272535,Namespace:tigera-operator,Attempt:0,}" Jul 2 01:51:35.624585 env[1474]: time="2024-07-02T01:51:35.624493712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:35.624585 env[1474]: time="2024-07-02T01:51:35.624546671Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:35.624773 env[1474]: time="2024-07-02T01:51:35.624557631Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:35.624773 env[1474]: time="2024-07-02T01:51:35.624662869Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434 pid=2784 runtime=io.containerd.runc.v2 Jul 2 01:51:35.634421 systemd[1]: Started cri-containerd-9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434.scope. Jul 2 01:51:35.653565 kernel: kauditd_printk_skb: 111 callbacks suppressed Jul 2 01:51:35.653766 kernel: audit: type=1400 audit(1719885095.646:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.687515 kernel: audit: type=1400 audit(1719885095.646:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.687870 kernel: audit: type=1400 audit(1719885095.646:830): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.721373 kernel: audit: type=1400 audit(1719885095.646:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.737965 kernel: audit: type=1400 audit(1719885095.646:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.755246 kernel: audit: type=1400 audit(1719885095.646:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.763713 env[1474]: time="2024-07-02T01:51:35.763665504Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-pfqrm,Uid:a6046424-72b9-4d6e-b481-a2091e272535,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434\"" Jul 2 01:51:35.765401 env[1474]: time="2024-07-02T01:51:35.765377677Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 01:51:35.772067 kernel: audit: type=1400 audit(1719885095.646:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.789892 kernel: audit: type=1400 audit(1719885095.646:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.806098 kernel: audit: type=1400 audit(1719885095.646:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.822355 kernel: audit: type=1400 audit(1719885095.652:837): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.652000 audit: BPF prog-id=111 op=LOAD Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2784 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623233343534326264383730613539336561343131633633656330 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2784 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623233343534326264383730613539336561343131633633656330 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit: BPF prog-id=112 op=LOAD Jul 2 01:51:35.669000 audit[2796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2784 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623233343534326264383730613539336561343131633633656330 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit: BPF prog-id=113 op=LOAD Jul 2 01:51:35.669000 audit[2796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2784 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623233343534326264383730613539336561343131633633656330 Jul 2 01:51:35.669000 audit: BPF prog-id=113 op=UNLOAD Jul 2 01:51:35.669000 audit: BPF prog-id=112 op=UNLOAD Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:35.669000 audit: BPF prog-id=114 op=LOAD Jul 2 01:51:35.669000 audit[2796]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2784 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961623233343534326264383730613539336561343131633633656330 Jul 2 01:51:35.675000 audit[2813]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2813 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.675000 audit[2813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdb263960 a2=0 a3=1 items=0 ppid=2729 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 01:51:35.675000 audit[2815]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.675000 audit[2815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe6cdd5f0 a2=0 a3=1 items=0 ppid=2729 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 01:51:35.826000 audit[2824]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.826000 audit[2824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc10151a0 a2=0 a3=1 items=0 ppid=2729 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 01:51:35.827000 audit[2825]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.827000 audit[2825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9003680 a2=0 a3=1 items=0 ppid=2729 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.827000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 01:51:35.829000 audit[2827]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.829000 audit[2827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffadd4520 a2=0 a3=1 items=0 ppid=2729 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 01:51:35.830000 audit[2828]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.830000 audit[2828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd33b2bd0 a2=0 a3=1 items=0 ppid=2729 pid=2828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 01:51:35.832000 audit[2830]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.832000 audit[2830]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff00dcd60 a2=0 a3=1 items=0 ppid=2729 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 01:51:35.835000 audit[2833]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2833 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.835000 audit[2833]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffce9f53c0 a2=0 a3=1 items=0 ppid=2729 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 01:51:35.836000 audit[2834]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.836000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0664e50 a2=0 a3=1 items=0 ppid=2729 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 01:51:35.838000 audit[2836]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.838000 audit[2836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd56d850 a2=0 a3=1 items=0 ppid=2729 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 01:51:35.839000 audit[2837]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.839000 audit[2837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7ae9c00 a2=0 a3=1 items=0 ppid=2729 pid=2837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.839000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 01:51:35.841000 audit[2839]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.841000 audit[2839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6841a20 a2=0 a3=1 items=0 ppid=2729 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.841000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 01:51:35.844000 audit[2842]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.844000 audit[2842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc00c3b10 a2=0 a3=1 items=0 ppid=2729 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 01:51:35.847000 audit[2845]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.847000 audit[2845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff10725f0 a2=0 a3=1 items=0 ppid=2729 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 01:51:35.848000 audit[2846]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.848000 audit[2846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffeb2f020 a2=0 a3=1 items=0 ppid=2729 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.848000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 01:51:35.851000 audit[2848]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2848 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.851000 audit[2848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffcabb58f0 a2=0 a3=1 items=0 ppid=2729 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 01:51:35.854000 audit[2851]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2851 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.854000 audit[2851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdc726ca0 a2=0 a3=1 items=0 ppid=2729 pid=2851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.854000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 01:51:35.855000 audit[2852]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.855000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec1dfa40 a2=0 a3=1 items=0 ppid=2729 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.855000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 01:51:35.857000 audit[2854]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 01:51:35.857000 audit[2854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd70e4b20 a2=0 a3=1 items=0 ppid=2729 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.857000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 01:51:35.922000 audit[2860]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2860 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:35.922000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffd7c51210 a2=0 a3=1 items=0 ppid=2729 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:35.946000 audit[2860]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2860 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:35.946000 audit[2860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd7c51210 a2=0 a3=1 items=0 ppid=2729 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.946000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:35.950000 audit[2866]: NETFILTER_CFG table=filter:68 family=2 entries=14 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:35.950000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffe91af2f0 a2=0 a3=1 items=0 ppid=2729 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.950000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:35.951000 audit[2866]: NETFILTER_CFG table=nat:69 family=2 entries=12 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:35.951000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe91af2f0 a2=0 a3=1 items=0 ppid=2729 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.951000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:35.953000 audit[2867]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2867 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.953000 audit[2867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc8414120 a2=0 a3=1 items=0 ppid=2729 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 01:51:35.955000 audit[2869]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2869 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.955000 audit[2869]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffce3f54b0 a2=0 a3=1 items=0 ppid=2729 pid=2869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 01:51:35.962000 audit[2872]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2872 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.962000 audit[2872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd01156d0 a2=0 a3=1 items=0 ppid=2729 pid=2872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.962000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 01:51:35.963000 audit[2873]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2873 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.963000 audit[2873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa042770 a2=0 a3=1 items=0 ppid=2729 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.963000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 01:51:35.965000 audit[2875]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2875 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.965000 audit[2875]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7731af0 a2=0 a3=1 items=0 ppid=2729 pid=2875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 01:51:35.966000 audit[2876]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2876 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.966000 audit[2876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc45f4ed0 a2=0 a3=1 items=0 ppid=2729 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.966000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 01:51:35.968000 audit[2878]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2878 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.968000 audit[2878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffe7515f0 a2=0 a3=1 items=0 ppid=2729 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 01:51:35.971000 audit[2881]: NETFILTER_CFG table=filter:77 family=10 entries=2 op=nft_register_chain pid=2881 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.971000 audit[2881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffcc86ffb0 a2=0 a3=1 items=0 ppid=2729 pid=2881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.971000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 01:51:35.972000 audit[2882]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2882 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.972000 audit[2882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea473760 a2=0 a3=1 items=0 ppid=2729 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 01:51:35.974000 audit[2884]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2884 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.974000 audit[2884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc31114b0 a2=0 a3=1 items=0 ppid=2729 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 01:51:35.975000 audit[2885]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2885 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.975000 audit[2885]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0a4ab20 a2=0 a3=1 items=0 ppid=2729 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 01:51:35.977000 audit[2887]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2887 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.977000 audit[2887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff23b0450 a2=0 a3=1 items=0 ppid=2729 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 01:51:35.980000 audit[2890]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2890 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.980000 audit[2890]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdde9f9a0 a2=0 a3=1 items=0 ppid=2729 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 01:51:35.983000 audit[2893]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2893 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.983000 audit[2893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe5780cc0 a2=0 a3=1 items=0 ppid=2729 pid=2893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.983000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 01:51:35.984000 audit[2894]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=2894 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.984000 audit[2894]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffe76b570 a2=0 a3=1 items=0 ppid=2729 pid=2894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.984000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 01:51:35.986000 audit[2896]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2896 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.986000 audit[2896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd611a9d0 a2=0 a3=1 items=0 ppid=2729 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 01:51:35.990000 audit[2899]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2899 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.990000 audit[2899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff17352a0 a2=0 a3=1 items=0 ppid=2729 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 01:51:35.991000 audit[2900]: NETFILTER_CFG table=nat:87 family=10 entries=1 op=nft_register_chain pid=2900 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.991000 audit[2900]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec002b90 a2=0 a3=1 items=0 ppid=2729 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.991000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 01:51:35.993000 audit[2902]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2902 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.993000 audit[2902]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffffe8ee50 a2=0 a3=1 items=0 ppid=2729 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.993000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 01:51:35.994000 audit[2903]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2903 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.994000 audit[2903]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7d7d900 a2=0 a3=1 items=0 ppid=2729 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.994000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 01:51:35.996000 audit[2905]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2905 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.996000 audit[2905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffca46efe0 a2=0 a3=1 items=0 ppid=2729 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.996000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 01:51:35.999000 audit[2908]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2908 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 01:51:35.999000 audit[2908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd9c89ab0 a2=0 a3=1 items=0 ppid=2729 pid=2908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:35.999000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 01:51:36.002000 audit[2910]: NETFILTER_CFG table=filter:92 family=10 entries=3 op=nft_register_rule pid=2910 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 01:51:36.002000 audit[2910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2004 a0=3 a1=ffffe464f8e0 a2=0 a3=1 items=0 ppid=2729 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:36.002000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:36.002000 audit[2910]: NETFILTER_CFG table=nat:93 family=10 entries=7 op=nft_register_chain pid=2910 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 01:51:36.002000 audit[2910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe464f8e0 a2=0 a3=1 items=0 ppid=2729 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:36.002000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:36.392415 kubelet[2593]: I0702 01:51:36.392377 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-rp4j7" podStartSLOduration=2.392321507 podStartE2EDuration="2.392321507s" podCreationTimestamp="2024-07-02 01:51:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:51:36.392294228 +0000 UTC m=+17.229730799" watchObservedRunningTime="2024-07-02 01:51:36.392321507 +0000 UTC m=+17.229758078" Jul 2 01:51:37.235895 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1226529470.mount: Deactivated successfully. Jul 2 01:51:37.760025 env[1474]: time="2024-07-02T01:51:37.759947590Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:37.766686 env[1474]: time="2024-07-02T01:51:37.766649929Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5886f48e233edcb89c0e8e3cdbdc40101f3c2dfbe67d7717f01d19c27cd78f92,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:37.770967 env[1474]: time="2024-07-02T01:51:37.770939785Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:37.775114 env[1474]: time="2024-07-02T01:51:37.775069483Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:37.775738 env[1474]: time="2024-07-02T01:51:37.775708953Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:5886f48e233edcb89c0e8e3cdbdc40101f3c2dfbe67d7717f01d19c27cd78f92\"" Jul 2 01:51:37.779006 env[1474]: time="2024-07-02T01:51:37.778921825Z" level=info msg="CreateContainer within sandbox \"9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 01:51:37.801868 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount893520325.mount: Deactivated successfully. Jul 2 01:51:37.822800 env[1474]: time="2024-07-02T01:51:37.822759848Z" level=info msg="CreateContainer within sandbox \"9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa\"" Jul 2 01:51:37.824853 env[1474]: time="2024-07-02T01:51:37.824713219Z" level=info msg="StartContainer for \"51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa\"" Jul 2 01:51:37.840467 systemd[1]: Started cri-containerd-51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa.scope. Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.852000 audit: BPF prog-id=115 op=LOAD Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2784 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:37.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646362353863613939613532616462373336313839653562356365 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2784 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:37.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646362353863613939613532616462373336313839653562356365 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit: BPF prog-id=116 op=LOAD Jul 2 01:51:37.853000 audit[2919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2784 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:37.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646362353863613939613532616462373336313839653562356365 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit: BPF prog-id=117 op=LOAD Jul 2 01:51:37.853000 audit[2919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2784 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:37.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646362353863613939613532616462373336313839653562356365 Jul 2 01:51:37.853000 audit: BPF prog-id=117 op=UNLOAD Jul 2 01:51:37.853000 audit: BPF prog-id=116 op=UNLOAD Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { perfmon } for pid=2919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit[2919]: AVC avc: denied { bpf } for pid=2919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:37.853000 audit: BPF prog-id=118 op=LOAD Jul 2 01:51:37.853000 audit[2919]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2784 pid=2919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:37.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531646362353863613939613532616462373336313839653562356365 Jul 2 01:51:37.874135 env[1474]: time="2024-07-02T01:51:37.874089999Z" level=info msg="StartContainer for \"51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa\" returns successfully" Jul 2 01:51:38.200591 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2561262509.mount: Deactivated successfully. Jul 2 01:51:38.393914 kubelet[2593]: I0702 01:51:38.393814 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-pfqrm" podStartSLOduration=1.382563736 podStartE2EDuration="3.393775158s" podCreationTimestamp="2024-07-02 01:51:35 +0000 UTC" firstStartedPulling="2024-07-02 01:51:35.764767847 +0000 UTC m=+16.602204418" lastFinishedPulling="2024-07-02 01:51:37.775979309 +0000 UTC m=+18.613415840" observedRunningTime="2024-07-02 01:51:38.393280126 +0000 UTC m=+19.230716657" watchObservedRunningTime="2024-07-02 01:51:38.393775158 +0000 UTC m=+19.231211689" Jul 2 01:51:41.658000 audit[2953]: NETFILTER_CFG table=filter:94 family=2 entries=15 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.663449 kernel: kauditd_printk_skb: 245 callbacks suppressed Jul 2 01:51:41.663554 kernel: audit: type=1325 audit(1719885101.658:911): table=filter:94 family=2 entries=15 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.658000 audit[2953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffab8a490 a2=0 a3=1 items=0 ppid=2729 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.704976 kernel: audit: type=1300 audit(1719885101.658:911): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffab8a490 a2=0 a3=1 items=0 ppid=2729 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.658000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.718959 kernel: audit: type=1327 audit(1719885101.658:911): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.658000 audit[2953]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.732856 kernel: audit: type=1325 audit(1719885101.658:912): table=nat:95 family=2 entries=12 op=nft_register_rule pid=2953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.732951 kernel: audit: type=1300 audit(1719885101.658:912): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffab8a490 a2=0 a3=1 items=0 ppid=2729 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.658000 audit[2953]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffab8a490 a2=0 a3=1 items=0 ppid=2729 pid=2953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.658000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.773066 kernel: audit: type=1327 audit(1719885101.658:912): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.719000 audit[2955]: NETFILTER_CFG table=filter:96 family=2 entries=16 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.794072 kernel: audit: type=1325 audit(1719885101.719:913): table=filter:96 family=2 entries=16 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.719000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc6c84960 a2=0 a3=1 items=0 ppid=2729 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.827568 kernel: audit: type=1300 audit(1719885101.719:913): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc6c84960 a2=0 a3=1 items=0 ppid=2729 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.719000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.853601 kubelet[2593]: I0702 01:51:41.853569 2593 topology_manager.go:215] "Topology Admit Handler" podUID="1a037521-b997-4181-ae2c-1386a72e3d6b" podNamespace="calico-system" podName="calico-typha-546c9dbf6d-8rbjt" Jul 2 01:51:41.855363 kernel: audit: type=1327 audit(1719885101.719:913): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.859673 systemd[1]: Created slice kubepods-besteffort-pod1a037521_b997_4181_ae2c_1386a72e3d6b.slice. Jul 2 01:51:41.720000 audit[2955]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.887493 kernel: audit: type=1325 audit(1719885101.720:914): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:41.720000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc6c84960 a2=0 a3=1 items=0 ppid=2729 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:41.720000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:41.922957 kubelet[2593]: I0702 01:51:41.922853 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/1a037521-b997-4181-ae2c-1386a72e3d6b-typha-certs\") pod \"calico-typha-546c9dbf6d-8rbjt\" (UID: \"1a037521-b997-4181-ae2c-1386a72e3d6b\") " pod="calico-system/calico-typha-546c9dbf6d-8rbjt" Jul 2 01:51:41.922957 kubelet[2593]: I0702 01:51:41.922896 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-77ms4\" (UniqueName: \"kubernetes.io/projected/1a037521-b997-4181-ae2c-1386a72e3d6b-kube-api-access-77ms4\") pod \"calico-typha-546c9dbf6d-8rbjt\" (UID: \"1a037521-b997-4181-ae2c-1386a72e3d6b\") " pod="calico-system/calico-typha-546c9dbf6d-8rbjt" Jul 2 01:51:41.922957 kubelet[2593]: I0702 01:51:41.922922 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1a037521-b997-4181-ae2c-1386a72e3d6b-tigera-ca-bundle\") pod \"calico-typha-546c9dbf6d-8rbjt\" (UID: \"1a037521-b997-4181-ae2c-1386a72e3d6b\") " pod="calico-system/calico-typha-546c9dbf6d-8rbjt" Jul 2 01:51:41.979585 kubelet[2593]: I0702 01:51:41.979539 2593 topology_manager.go:215] "Topology Admit Handler" podUID="9eaf865e-bede-4c44-ba5f-0259e9275044" podNamespace="calico-system" podName="calico-node-brm5z" Jul 2 01:51:41.984667 systemd[1]: Created slice kubepods-besteffort-pod9eaf865e_bede_4c44_ba5f_0259e9275044.slice. Jul 2 01:51:42.023197 kubelet[2593]: I0702 01:51:42.023169 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9eaf865e-bede-4c44-ba5f-0259e9275044-tigera-ca-bundle\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.023418 kubelet[2593]: I0702 01:51:42.023405 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-var-run-calico\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.023592 kubelet[2593]: I0702 01:51:42.023580 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-cni-bin-dir\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.023720 kubelet[2593]: I0702 01:51:42.023709 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-flexvol-driver-host\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.023845 kubelet[2593]: I0702 01:51:42.023835 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-lib-modules\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.024819 kubelet[2593]: I0702 01:51:42.024802 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-xtables-lock\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.024968 kubelet[2593]: I0702 01:51:42.024958 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/9eaf865e-bede-4c44-ba5f-0259e9275044-node-certs\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.025468 kubelet[2593]: I0702 01:51:42.025095 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-policysync\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.025658 kubelet[2593]: I0702 01:51:42.025647 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-cni-net-dir\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.025766 kubelet[2593]: I0702 01:51:42.025756 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-cni-log-dir\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.025866 kubelet[2593]: I0702 01:51:42.025852 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9eaf865e-bede-4c44-ba5f-0259e9275044-var-lib-calico\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.025959 kubelet[2593]: I0702 01:51:42.025949 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qb48z\" (UniqueName: \"kubernetes.io/projected/9eaf865e-bede-4c44-ba5f-0259e9275044-kube-api-access-qb48z\") pod \"calico-node-brm5z\" (UID: \"9eaf865e-bede-4c44-ba5f-0259e9275044\") " pod="calico-system/calico-node-brm5z" Jul 2 01:51:42.119641 kubelet[2593]: I0702 01:51:42.119609 2593 topology_manager.go:215] "Topology Admit Handler" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" podNamespace="calico-system" podName="csi-node-driver-s29vz" Jul 2 01:51:42.120073 kubelet[2593]: E0702 01:51:42.120054 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:42.128525 kubelet[2593]: E0702 01:51:42.128506 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.128661 kubelet[2593]: W0702 01:51:42.128648 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.128784 kubelet[2593]: E0702 01:51:42.128772 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.129091 kubelet[2593]: E0702 01:51:42.129078 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.129191 kubelet[2593]: W0702 01:51:42.129177 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.129268 kubelet[2593]: E0702 01:51:42.129259 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.131355 kubelet[2593]: E0702 01:51:42.131324 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.131477 kubelet[2593]: W0702 01:51:42.131464 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.131553 kubelet[2593]: E0702 01:51:42.131543 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.131847 kubelet[2593]: E0702 01:51:42.131834 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.131952 kubelet[2593]: W0702 01:51:42.131940 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.132031 kubelet[2593]: E0702 01:51:42.132021 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.134488 kubelet[2593]: E0702 01:51:42.134466 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.134585 kubelet[2593]: W0702 01:51:42.134572 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.134668 kubelet[2593]: E0702 01:51:42.134658 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.142490 kubelet[2593]: E0702 01:51:42.142466 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.142619 kubelet[2593]: W0702 01:51:42.142604 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.142743 kubelet[2593]: E0702 01:51:42.142731 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.155505 kubelet[2593]: E0702 01:51:42.155484 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.155616 kubelet[2593]: W0702 01:51:42.155602 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.155712 kubelet[2593]: E0702 01:51:42.155684 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.163493 env[1474]: time="2024-07-02T01:51:42.163072232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-546c9dbf6d-8rbjt,Uid:1a037521-b997-4181-ae2c-1386a72e3d6b,Namespace:calico-system,Attempt:0,}" Jul 2 01:51:42.205019 env[1474]: time="2024-07-02T01:51:42.204737982Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:42.205019 env[1474]: time="2024-07-02T01:51:42.204787502Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:42.205019 env[1474]: time="2024-07-02T01:51:42.204798022Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:42.206501 env[1474]: time="2024-07-02T01:51:42.206421279Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4899d4dbf5bb66e39d66fdcf8ec914e102cc1f47470152c400168d96ace5a623 pid=2973 runtime=io.containerd.runc.v2 Jul 2 01:51:42.217481 kubelet[2593]: E0702 01:51:42.217455 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.217481 kubelet[2593]: W0702 01:51:42.217475 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.217632 kubelet[2593]: E0702 01:51:42.217497 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218110 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220321 kubelet[2593]: W0702 01:51:42.218124 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218140 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218305 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220321 kubelet[2593]: W0702 01:51:42.218313 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218324 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218495 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220321 kubelet[2593]: W0702 01:51:42.218516 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218527 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220321 kubelet[2593]: E0702 01:51:42.218665 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220604 kubelet[2593]: W0702 01:51:42.218681 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.218701 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.218843 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220604 kubelet[2593]: W0702 01:51:42.218868 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.218879 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.219003 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220604 kubelet[2593]: W0702 01:51:42.219009 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.219019 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220604 kubelet[2593]: E0702 01:51:42.219125 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220604 kubelet[2593]: W0702 01:51:42.219131 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219139 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219242 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220811 kubelet[2593]: W0702 01:51:42.219247 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219257 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219378 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220811 kubelet[2593]: W0702 01:51:42.219384 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219402 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219533 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.220811 kubelet[2593]: W0702 01:51:42.219540 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.220811 kubelet[2593]: E0702 01:51:42.219549 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219666 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221032 kubelet[2593]: W0702 01:51:42.219681 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219691 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219820 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221032 kubelet[2593]: W0702 01:51:42.219827 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219838 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219955 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221032 kubelet[2593]: W0702 01:51:42.219960 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.219970 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221032 kubelet[2593]: E0702 01:51:42.220065 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221240 kubelet[2593]: W0702 01:51:42.220070 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.220080 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.220207 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221240 kubelet[2593]: W0702 01:51:42.220215 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.220224 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.220942 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221240 kubelet[2593]: W0702 01:51:42.220952 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.220965 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221240 kubelet[2593]: E0702 01:51:42.221098 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221240 kubelet[2593]: W0702 01:51:42.221105 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221667 kubelet[2593]: E0702 01:51:42.221114 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221667 kubelet[2593]: E0702 01:51:42.221213 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221667 kubelet[2593]: W0702 01:51:42.221219 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221667 kubelet[2593]: E0702 01:51:42.221228 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.221667 kubelet[2593]: E0702 01:51:42.221322 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.221667 kubelet[2593]: W0702 01:51:42.221339 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.221667 kubelet[2593]: E0702 01:51:42.221350 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.223407 systemd[1]: Started cri-containerd-4899d4dbf5bb66e39d66fdcf8ec914e102cc1f47470152c400168d96ace5a623.scope. Jul 2 01:51:42.227933 kubelet[2593]: E0702 01:51:42.227731 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.227933 kubelet[2593]: W0702 01:51:42.227774 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.227933 kubelet[2593]: E0702 01:51:42.227792 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.227933 kubelet[2593]: I0702 01:51:42.227822 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/2ac2c28e-64f4-4665-a458-e30d1c8cbbcc-varrun\") pod \"csi-node-driver-s29vz\" (UID: \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\") " pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:42.228396 kubelet[2593]: E0702 01:51:42.228206 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.228396 kubelet[2593]: W0702 01:51:42.228222 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.228396 kubelet[2593]: E0702 01:51:42.228255 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.228396 kubelet[2593]: I0702 01:51:42.228277 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/2ac2c28e-64f4-4665-a458-e30d1c8cbbcc-kubelet-dir\") pod \"csi-node-driver-s29vz\" (UID: \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\") " pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:42.228722 kubelet[2593]: E0702 01:51:42.228610 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.228722 kubelet[2593]: W0702 01:51:42.228624 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.228722 kubelet[2593]: E0702 01:51:42.228653 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.228722 kubelet[2593]: I0702 01:51:42.228675 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qqkkc\" (UniqueName: \"kubernetes.io/projected/2ac2c28e-64f4-4665-a458-e30d1c8cbbcc-kube-api-access-qqkkc\") pod \"csi-node-driver-s29vz\" (UID: \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\") " pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:42.228862 kubelet[2593]: E0702 01:51:42.228826 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.228862 kubelet[2593]: W0702 01:51:42.228837 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.228862 kubelet[2593]: E0702 01:51:42.228858 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.230487 kubelet[2593]: E0702 01:51:42.228979 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.230487 kubelet[2593]: W0702 01:51:42.228993 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.230487 kubelet[2593]: E0702 01:51:42.229006 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.230834 kubelet[2593]: E0702 01:51:42.230810 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.230834 kubelet[2593]: W0702 01:51:42.230830 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.230933 kubelet[2593]: E0702 01:51:42.230856 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231042 kubelet[2593]: E0702 01:51:42.231025 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231042 kubelet[2593]: W0702 01:51:42.231038 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231110 kubelet[2593]: E0702 01:51:42.231049 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231199 kubelet[2593]: E0702 01:51:42.231186 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231199 kubelet[2593]: W0702 01:51:42.231198 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231274 kubelet[2593]: E0702 01:51:42.231214 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231274 kubelet[2593]: I0702 01:51:42.231239 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/2ac2c28e-64f4-4665-a458-e30d1c8cbbcc-registration-dir\") pod \"csi-node-driver-s29vz\" (UID: \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\") " pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:42.231420 kubelet[2593]: E0702 01:51:42.231388 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231420 kubelet[2593]: W0702 01:51:42.231401 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231617 kubelet[2593]: E0702 01:51:42.231530 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231617 kubelet[2593]: E0702 01:51:42.231543 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231617 kubelet[2593]: W0702 01:51:42.231549 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231617 kubelet[2593]: I0702 01:51:42.231560 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/2ac2c28e-64f4-4665-a458-e30d1c8cbbcc-socket-dir\") pod \"csi-node-driver-s29vz\" (UID: \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\") " pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:42.231617 kubelet[2593]: E0702 01:51:42.231599 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231776 kubelet[2593]: E0702 01:51:42.231667 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231776 kubelet[2593]: W0702 01:51:42.231674 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231776 kubelet[2593]: E0702 01:51:42.231689 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.231844 kubelet[2593]: E0702 01:51:42.231813 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.231844 kubelet[2593]: W0702 01:51:42.231820 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.231844 kubelet[2593]: E0702 01:51:42.231831 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.231950 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.232367 kubelet[2593]: W0702 01:51:42.231961 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.231972 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.232104 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.232367 kubelet[2593]: W0702 01:51:42.232113 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.232123 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.232236 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.232367 kubelet[2593]: W0702 01:51:42.232243 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.232367 kubelet[2593]: E0702 01:51:42.232252 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.242000 audit: BPF prog-id=119 op=LOAD Jul 2 01:51:42.243000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.243000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2973 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393964346462663562623636653339643636666463663865633931 Jul 2 01:51:42.243000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.243000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2973 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393964346462663562623636653339643636666463663865633931 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.244000 audit: BPF prog-id=120 op=LOAD Jul 2 01:51:42.244000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2973 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393964346462663562623636653339643636666463663865633931 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.245000 audit: BPF prog-id=121 op=LOAD Jul 2 01:51:42.245000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2973 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393964346462663562623636653339643636666463663865633931 Jul 2 01:51:42.245000 audit: BPF prog-id=121 op=UNLOAD Jul 2 01:51:42.245000 audit: BPF prog-id=120 op=UNLOAD Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { perfmon } for pid=2983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit[2983]: AVC avc: denied { bpf } for pid=2983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.246000 audit: BPF prog-id=122 op=LOAD Jul 2 01:51:42.246000 audit[2983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2973 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393964346462663562623636653339643636666463663865633931 Jul 2 01:51:42.268661 env[1474]: time="2024-07-02T01:51:42.268564390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-546c9dbf6d-8rbjt,Uid:1a037521-b997-4181-ae2c-1386a72e3d6b,Namespace:calico-system,Attempt:0,} returns sandbox id \"4899d4dbf5bb66e39d66fdcf8ec914e102cc1f47470152c400168d96ace5a623\"" Jul 2 01:51:42.270265 env[1474]: time="2024-07-02T01:51:42.270180447Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 01:51:42.288631 env[1474]: time="2024-07-02T01:51:42.288603516Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-brm5z,Uid:9eaf865e-bede-4c44-ba5f-0259e9275044,Namespace:calico-system,Attempt:0,}" Jul 2 01:51:42.325418 env[1474]: time="2024-07-02T01:51:42.325136296Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:51:42.325418 env[1474]: time="2024-07-02T01:51:42.325176255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:51:42.325418 env[1474]: time="2024-07-02T01:51:42.325186175Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:51:42.328362 env[1474]: time="2024-07-02T01:51:42.327353866Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6 pid=3053 runtime=io.containerd.runc.v2 Jul 2 01:51:42.332917 kubelet[2593]: E0702 01:51:42.332765 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.332917 kubelet[2593]: W0702 01:51:42.332789 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.332917 kubelet[2593]: E0702 01:51:42.332813 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.333400 kubelet[2593]: E0702 01:51:42.333135 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.333400 kubelet[2593]: W0702 01:51:42.333147 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.333400 kubelet[2593]: E0702 01:51:42.333171 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.333735 kubelet[2593]: E0702 01:51:42.333587 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.333735 kubelet[2593]: W0702 01:51:42.333600 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.333735 kubelet[2593]: E0702 01:51:42.333631 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.334116 kubelet[2593]: E0702 01:51:42.333909 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.334116 kubelet[2593]: W0702 01:51:42.333920 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.334116 kubelet[2593]: E0702 01:51:42.333939 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.334375 kubelet[2593]: E0702 01:51:42.334287 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.334375 kubelet[2593]: W0702 01:51:42.334299 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.334461 kubelet[2593]: E0702 01:51:42.334401 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.334832 kubelet[2593]: E0702 01:51:42.334680 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.334832 kubelet[2593]: W0702 01:51:42.334694 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.334832 kubelet[2593]: E0702 01:51:42.334734 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.335106 kubelet[2593]: E0702 01:51:42.334994 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.335106 kubelet[2593]: W0702 01:51:42.335005 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.335106 kubelet[2593]: E0702 01:51:42.335066 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.335438 kubelet[2593]: E0702 01:51:42.335275 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.335438 kubelet[2593]: W0702 01:51:42.335287 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.335438 kubelet[2593]: E0702 01:51:42.335318 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.335713 kubelet[2593]: E0702 01:51:42.335598 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.335713 kubelet[2593]: W0702 01:51:42.335612 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.335713 kubelet[2593]: E0702 01:51:42.335653 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.335995 kubelet[2593]: E0702 01:51:42.335894 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.335995 kubelet[2593]: W0702 01:51:42.335906 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.335995 kubelet[2593]: E0702 01:51:42.335943 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.336267 kubelet[2593]: E0702 01:51:42.336164 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.336267 kubelet[2593]: W0702 01:51:42.336175 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.336267 kubelet[2593]: E0702 01:51:42.336205 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.336603 kubelet[2593]: E0702 01:51:42.336442 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.336603 kubelet[2593]: W0702 01:51:42.336455 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.336844 kubelet[2593]: E0702 01:51:42.336738 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.336844 kubelet[2593]: W0702 01:51:42.336750 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.336844 kubelet[2593]: E0702 01:51:42.336753 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.336844 kubelet[2593]: E0702 01:51:42.336773 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.337316 kubelet[2593]: E0702 01:51:42.337132 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.337316 kubelet[2593]: W0702 01:51:42.337146 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.337316 kubelet[2593]: E0702 01:51:42.337231 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.337826 kubelet[2593]: E0702 01:51:42.337509 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.337826 kubelet[2593]: W0702 01:51:42.337522 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.337826 kubelet[2593]: E0702 01:51:42.337669 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.338132 kubelet[2593]: E0702 01:51:42.338006 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.338132 kubelet[2593]: W0702 01:51:42.338019 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.338132 kubelet[2593]: E0702 01:51:42.338102 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.338416 kubelet[2593]: E0702 01:51:42.338286 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.338416 kubelet[2593]: W0702 01:51:42.338296 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.338416 kubelet[2593]: E0702 01:51:42.338327 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.338677 kubelet[2593]: E0702 01:51:42.338584 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.338677 kubelet[2593]: W0702 01:51:42.338595 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.338677 kubelet[2593]: E0702 01:51:42.338625 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.338850 kubelet[2593]: E0702 01:51:42.338840 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.338907 kubelet[2593]: W0702 01:51:42.338897 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.338980 kubelet[2593]: E0702 01:51:42.338964 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.339385 kubelet[2593]: E0702 01:51:42.339318 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.339485 kubelet[2593]: W0702 01:51:42.339472 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.339575 kubelet[2593]: E0702 01:51:42.339555 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.339783 kubelet[2593]: E0702 01:51:42.339770 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.339855 kubelet[2593]: W0702 01:51:42.339844 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.339953 kubelet[2593]: E0702 01:51:42.339931 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.340423 kubelet[2593]: E0702 01:51:42.340405 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.340509 kubelet[2593]: W0702 01:51:42.340496 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.340645 kubelet[2593]: E0702 01:51:42.340621 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.340887 kubelet[2593]: E0702 01:51:42.340875 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.340971 kubelet[2593]: W0702 01:51:42.340959 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.341068 kubelet[2593]: E0702 01:51:42.341046 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.341274 kubelet[2593]: E0702 01:51:42.341262 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.341367 kubelet[2593]: W0702 01:51:42.341353 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.341589 kubelet[2593]: E0702 01:51:42.341576 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.341658 kubelet[2593]: W0702 01:51:42.341648 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.341715 kubelet[2593]: E0702 01:51:42.341706 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.341796 kubelet[2593]: E0702 01:51:42.341784 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.348373 systemd[1]: Started cri-containerd-a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6.scope. Jul 2 01:51:42.353774 kubelet[2593]: E0702 01:51:42.353757 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:42.353867 kubelet[2593]: W0702 01:51:42.353854 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:42.353923 kubelet[2593]: E0702 01:51:42.353914 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.369000 audit: BPF prog-id=123 op=LOAD Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3053 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137623061373135646238613236333632363232653565336161616334 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3053 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137623061373135646238613236333632363232653565336161616334 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.370000 audit: BPF prog-id=124 op=LOAD Jul 2 01:51:42.370000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3053 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137623061373135646238613236333632363232653565336161616334 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.371000 audit: BPF prog-id=125 op=LOAD Jul 2 01:51:42.371000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3053 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137623061373135646238613236333632363232653565336161616334 Jul 2 01:51:42.372000 audit: BPF prog-id=125 op=UNLOAD Jul 2 01:51:42.372000 audit: BPF prog-id=124 op=UNLOAD Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { perfmon } for pid=3062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit[3062]: AVC avc: denied { bpf } for pid=3062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:42.372000 audit: BPF prog-id=126 op=LOAD Jul 2 01:51:42.372000 audit[3062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3053 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137623061373135646238613236333632363232653565336161616334 Jul 2 01:51:42.384096 env[1474]: time="2024-07-02T01:51:42.384061130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-brm5z,Uid:9eaf865e-bede-4c44-ba5f-0259e9275044,Namespace:calico-system,Attempt:0,} returns sandbox id \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\"" Jul 2 01:51:42.841000 audit[3113]: NETFILTER_CFG table=filter:98 family=2 entries=16 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:42.841000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffd7395c30 a2=0 a3=1 items=0 ppid=2729 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:42.842000 audit[3113]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:51:42.842000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd7395c30 a2=0 a3=1 items=0 ppid=2729 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:42.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:51:43.991929 env[1474]: time="2024-07-02T01:51:43.991874100Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:43.999795 env[1474]: time="2024-07-02T01:51:43.999544877Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2551880d36cd0ce4c6820747ffe4c40cbf344d26df0ecd878808432ad4f78f03,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:44.005761 env[1474]: time="2024-07-02T01:51:44.005711396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:44.010275 env[1474]: time="2024-07-02T01:51:44.010237016Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:44.010771 env[1474]: time="2024-07-02T01:51:44.010735529Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:2551880d36cd0ce4c6820747ffe4c40cbf344d26df0ecd878808432ad4f78f03\"" Jul 2 01:51:44.023163 env[1474]: time="2024-07-02T01:51:44.023128606Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 01:51:44.024226 env[1474]: time="2024-07-02T01:51:44.024184992Z" level=info msg="CreateContainer within sandbox \"4899d4dbf5bb66e39d66fdcf8ec914e102cc1f47470152c400168d96ace5a623\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 01:51:44.069733 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4210926161.mount: Deactivated successfully. Jul 2 01:51:44.096162 env[1474]: time="2024-07-02T01:51:44.096115642Z" level=info msg="CreateContainer within sandbox \"4899d4dbf5bb66e39d66fdcf8ec914e102cc1f47470152c400168d96ace5a623\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"0028a65cfe13c06994ee38f4461e3bef9b992c06f8192476689f8a5f15c428af\"" Jul 2 01:51:44.098575 env[1474]: time="2024-07-02T01:51:44.098544930Z" level=info msg="StartContainer for \"0028a65cfe13c06994ee38f4461e3bef9b992c06f8192476689f8a5f15c428af\"" Jul 2 01:51:44.120969 systemd[1]: Started cri-containerd-0028a65cfe13c06994ee38f4461e3bef9b992c06f8192476689f8a5f15c428af.scope. Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.133000 audit: BPF prog-id=127 op=LOAD Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2973 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:44.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323861363563666531336330363939346565333866343436316533 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2973 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:44.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323861363563666531336330363939346565333866343436316533 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.134000 audit: BPF prog-id=128 op=LOAD Jul 2 01:51:44.134000 audit[3125]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2973 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:44.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323861363563666531336330363939346565333866343436316533 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit: BPF prog-id=129 op=LOAD Jul 2 01:51:44.135000 audit[3125]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2973 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:44.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323861363563666531336330363939346565333866343436316533 Jul 2 01:51:44.135000 audit: BPF prog-id=129 op=UNLOAD Jul 2 01:51:44.135000 audit: BPF prog-id=128 op=UNLOAD Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { perfmon } for pid=3125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit[3125]: AVC avc: denied { bpf } for pid=3125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:44.135000 audit: BPF prog-id=130 op=LOAD Jul 2 01:51:44.135000 audit[3125]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2973 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:44.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030323861363563666531336330363939346565333866343436316533 Jul 2 01:51:44.163304 env[1474]: time="2024-07-02T01:51:44.163263955Z" level=info msg="StartContainer for \"0028a65cfe13c06994ee38f4461e3bef9b992c06f8192476689f8a5f15c428af\" returns successfully" Jul 2 01:51:44.285825 kubelet[2593]: E0702 01:51:44.285766 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:44.436828 kubelet[2593]: E0702 01:51:44.436795 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.436828 kubelet[2593]: W0702 01:51:44.436831 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437006 kubelet[2593]: E0702 01:51:44.436853 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.437051 kubelet[2593]: E0702 01:51:44.437032 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.437051 kubelet[2593]: W0702 01:51:44.437045 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437107 kubelet[2593]: E0702 01:51:44.437065 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.437261 kubelet[2593]: E0702 01:51:44.437244 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.437261 kubelet[2593]: W0702 01:51:44.437257 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437361 kubelet[2593]: E0702 01:51:44.437268 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.437460 kubelet[2593]: E0702 01:51:44.437444 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.437460 kubelet[2593]: W0702 01:51:44.437458 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437538 kubelet[2593]: E0702 01:51:44.437469 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.437689 kubelet[2593]: E0702 01:51:44.437672 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.437689 kubelet[2593]: W0702 01:51:44.437686 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437776 kubelet[2593]: E0702 01:51:44.437706 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.437873 kubelet[2593]: E0702 01:51:44.437856 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.437873 kubelet[2593]: W0702 01:51:44.437870 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.437946 kubelet[2593]: E0702 01:51:44.437881 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.438092 kubelet[2593]: E0702 01:51:44.438076 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.438092 kubelet[2593]: W0702 01:51:44.438089 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.438168 kubelet[2593]: E0702 01:51:44.438106 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.438265 kubelet[2593]: E0702 01:51:44.438250 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.438265 kubelet[2593]: W0702 01:51:44.438263 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.438349 kubelet[2593]: E0702 01:51:44.438275 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.438516 kubelet[2593]: E0702 01:51:44.438500 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.438567 kubelet[2593]: W0702 01:51:44.438513 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.438567 kubelet[2593]: E0702 01:51:44.438530 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.438693 kubelet[2593]: E0702 01:51:44.438678 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.438693 kubelet[2593]: W0702 01:51:44.438690 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.438787 kubelet[2593]: E0702 01:51:44.438707 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.438952 kubelet[2593]: E0702 01:51:44.438936 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.438952 kubelet[2593]: W0702 01:51:44.438949 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.439085 kubelet[2593]: E0702 01:51:44.438961 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.439120 kubelet[2593]: E0702 01:51:44.439103 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.439120 kubelet[2593]: W0702 01:51:44.439111 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.439120 kubelet[2593]: E0702 01:51:44.439120 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.439320 kubelet[2593]: E0702 01:51:44.439304 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.439320 kubelet[2593]: W0702 01:51:44.439317 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.439444 kubelet[2593]: E0702 01:51:44.439328 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.439505 kubelet[2593]: E0702 01:51:44.439488 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.439505 kubelet[2593]: W0702 01:51:44.439500 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.439581 kubelet[2593]: E0702 01:51:44.439511 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.439727 kubelet[2593]: E0702 01:51:44.439711 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.439727 kubelet[2593]: W0702 01:51:44.439724 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.439799 kubelet[2593]: E0702 01:51:44.439740 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.449147 kubelet[2593]: E0702 01:51:44.449128 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.449260 kubelet[2593]: W0702 01:51:44.449246 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.449323 kubelet[2593]: E0702 01:51:44.449313 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.449671 kubelet[2593]: E0702 01:51:44.449657 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.449766 kubelet[2593]: W0702 01:51:44.449753 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.449843 kubelet[2593]: E0702 01:51:44.449832 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.450067 kubelet[2593]: E0702 01:51:44.450047 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.450067 kubelet[2593]: W0702 01:51:44.450062 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.450176 kubelet[2593]: E0702 01:51:44.450082 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.450442 kubelet[2593]: E0702 01:51:44.450416 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.450442 kubelet[2593]: W0702 01:51:44.450438 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.450594 kubelet[2593]: E0702 01:51:44.450457 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.450624 kubelet[2593]: E0702 01:51:44.450604 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.450624 kubelet[2593]: W0702 01:51:44.450612 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.450624 kubelet[2593]: E0702 01:51:44.450624 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.450838 kubelet[2593]: E0702 01:51:44.450819 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.450838 kubelet[2593]: W0702 01:51:44.450833 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.450928 kubelet[2593]: E0702 01:51:44.450850 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.451140 kubelet[2593]: E0702 01:51:44.451126 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.451214 kubelet[2593]: W0702 01:51:44.451202 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.451283 kubelet[2593]: E0702 01:51:44.451274 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.451557 kubelet[2593]: E0702 01:51:44.451544 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.451657 kubelet[2593]: W0702 01:51:44.451645 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.451728 kubelet[2593]: E0702 01:51:44.451718 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.451879 kubelet[2593]: E0702 01:51:44.451863 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.451879 kubelet[2593]: W0702 01:51:44.451877 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.451962 kubelet[2593]: E0702 01:51:44.451896 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.452133 kubelet[2593]: E0702 01:51:44.452116 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.452133 kubelet[2593]: W0702 01:51:44.452129 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.452133 kubelet[2593]: E0702 01:51:44.452147 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.452300 kubelet[2593]: E0702 01:51:44.452283 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.452300 kubelet[2593]: W0702 01:51:44.452295 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.452449 kubelet[2593]: E0702 01:51:44.452311 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.452635 kubelet[2593]: E0702 01:51:44.452612 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.452635 kubelet[2593]: W0702 01:51:44.452627 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.452635 kubelet[2593]: E0702 01:51:44.452644 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.452804 kubelet[2593]: E0702 01:51:44.452786 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.452804 kubelet[2593]: W0702 01:51:44.452798 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.452865 kubelet[2593]: E0702 01:51:44.452808 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.453071 kubelet[2593]: E0702 01:51:44.453057 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.453155 kubelet[2593]: W0702 01:51:44.453144 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.453214 kubelet[2593]: E0702 01:51:44.453205 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.453467 kubelet[2593]: E0702 01:51:44.453454 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.453552 kubelet[2593]: W0702 01:51:44.453540 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.453622 kubelet[2593]: E0702 01:51:44.453613 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.453864 kubelet[2593]: E0702 01:51:44.453845 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.453864 kubelet[2593]: W0702 01:51:44.453859 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.453957 kubelet[2593]: E0702 01:51:44.453872 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.454044 kubelet[2593]: E0702 01:51:44.454029 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.454044 kubelet[2593]: W0702 01:51:44.454041 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.454107 kubelet[2593]: E0702 01:51:44.454052 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:44.454390 kubelet[2593]: E0702 01:51:44.454371 2593 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 01:51:44.454390 kubelet[2593]: W0702 01:51:44.454386 2593 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 01:51:44.454476 kubelet[2593]: E0702 01:51:44.454398 2593 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 01:51:45.145235 env[1474]: time="2024-07-02T01:51:45.145194342Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:45.157140 env[1474]: time="2024-07-02T01:51:45.157093107Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b6a6a9b369fa6127e23e376ac423670fa81290e0860917acaacae108e3cc064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:45.161907 env[1474]: time="2024-07-02T01:51:45.161871365Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:45.168551 env[1474]: time="2024-07-02T01:51:45.168510479Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:45.169149 env[1474]: time="2024-07-02T01:51:45.169106511Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:4b6a6a9b369fa6127e23e376ac423670fa81290e0860917acaacae108e3cc064\"" Jul 2 01:51:45.171292 env[1474]: time="2024-07-02T01:51:45.171257563Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 01:51:45.227493 env[1474]: time="2024-07-02T01:51:45.227408515Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d\"" Jul 2 01:51:45.228077 env[1474]: time="2024-07-02T01:51:45.228052026Z" level=info msg="StartContainer for \"020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d\"" Jul 2 01:51:45.248879 systemd[1]: Started cri-containerd-020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d.scope. Jul 2 01:51:45.261592 systemd[1]: run-containerd-runc-k8s.io-020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d-runc.zy9pGR.mount: Deactivated successfully. Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3053 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:45.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032306637663266333037663639613339353332616366383830393435 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit: BPF prog-id=131 op=LOAD Jul 2 01:51:45.282000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3053 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:45.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032306637663266333037663639613339353332616366383830393435 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit: BPF prog-id=132 op=LOAD Jul 2 01:51:45.282000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3053 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:45.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032306637663266333037663639613339353332616366383830393435 Jul 2 01:51:45.282000 audit: BPF prog-id=132 op=UNLOAD Jul 2 01:51:45.282000 audit: BPF prog-id=131 op=UNLOAD Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:45.282000 audit: BPF prog-id=133 op=LOAD Jul 2 01:51:45.282000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3053 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:45.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032306637663266333037663639613339353332616366383830393435 Jul 2 01:51:45.301512 env[1474]: time="2024-07-02T01:51:45.301469153Z" level=info msg="StartContainer for \"020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d\" returns successfully" Jul 2 01:51:45.311978 systemd[1]: cri-containerd-020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d.scope: Deactivated successfully. Jul 2 01:51:45.316000 audit: BPF prog-id=133 op=UNLOAD Jul 2 01:51:45.403770 kubelet[2593]: I0702 01:51:45.402740 2593 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 01:51:45.416221 kubelet[2593]: I0702 01:51:45.416196 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-546c9dbf6d-8rbjt" podStartSLOduration=2.675053991 podStartE2EDuration="4.416158465s" podCreationTimestamp="2024-07-02 01:51:41 +0000 UTC" firstStartedPulling="2024-07-02 01:51:42.269950131 +0000 UTC m=+23.107386702" lastFinishedPulling="2024-07-02 01:51:44.011054605 +0000 UTC m=+24.848491176" observedRunningTime="2024-07-02 01:51:44.412909459 +0000 UTC m=+25.250346030" watchObservedRunningTime="2024-07-02 01:51:45.416158465 +0000 UTC m=+26.253595036" Jul 2 01:51:46.199010 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d-rootfs.mount: Deactivated successfully. Jul 2 01:51:46.235375 env[1474]: time="2024-07-02T01:51:46.235291403Z" level=info msg="shim disconnected" id=020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d Jul 2 01:51:46.235738 env[1474]: time="2024-07-02T01:51:46.235717838Z" level=warning msg="cleaning up after shim disconnected" id=020f7f2f307f69a39532acf880945c5c2366f66fa3bc42d66c7cd548558c309d namespace=k8s.io Jul 2 01:51:46.235816 env[1474]: time="2024-07-02T01:51:46.235803437Z" level=info msg="cleaning up dead shim" Jul 2 01:51:46.243240 env[1474]: time="2024-07-02T01:51:46.243210342Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:51:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3241 runtime=io.containerd.runc.v2\n" Jul 2 01:51:46.285519 kubelet[2593]: E0702 01:51:46.285467 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:46.406903 env[1474]: time="2024-07-02T01:51:46.406860933Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 01:51:48.285010 kubelet[2593]: E0702 01:51:48.284966 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:49.601486 env[1474]: time="2024-07-02T01:51:49.601445274Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:49.611178 env[1474]: time="2024-07-02T01:51:49.611129636Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:adcb19ea66141abcd7dc426e3205f2e6ff26e524a3f7148c97f3d49933f502ee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:49.620130 env[1474]: time="2024-07-02T01:51:49.619856890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:49.625862 env[1474]: time="2024-07-02T01:51:49.625814458Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:49.626522 env[1474]: time="2024-07-02T01:51:49.626487889Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:adcb19ea66141abcd7dc426e3205f2e6ff26e524a3f7148c97f3d49933f502ee\"" Jul 2 01:51:49.631576 env[1474]: time="2024-07-02T01:51:49.631530908Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 01:51:49.657201 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1076848696.mount: Deactivated successfully. Jul 2 01:51:49.675471 env[1474]: time="2024-07-02T01:51:49.675424295Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af\"" Jul 2 01:51:49.677052 env[1474]: time="2024-07-02T01:51:49.676574561Z" level=info msg="StartContainer for \"e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af\"" Jul 2 01:51:49.701044 systemd[1]: Started cri-containerd-e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af.scope. Jul 2 01:51:49.719000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.725036 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 2 01:51:49.725148 kernel: audit: type=1400 audit(1719885109.719:978): avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.719000 audit[3263]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3053 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:49.766435 kernel: audit: type=1300 audit(1719885109.719:978): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3053 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:49.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534643134313264383433323162393861313337626161393332646439 Jul 2 01:51:49.789829 kernel: audit: type=1327 audit(1719885109.719:978): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534643134313264383433323162393861313337626161393332646439 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.809557 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.827342 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.844303 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.863280 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.881197 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.900149 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.902910 env[1474]: time="2024-07-02T01:51:49.902875091Z" level=info msg="StartContainer for \"e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af\" returns successfully" Jul 2 01:51:49.919825 kernel: audit: type=1400 audit(1719885109.720:979): avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.720000 audit: BPF prog-id=134 op=LOAD Jul 2 01:51:49.720000 audit[3263]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3053 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:49.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534643134313264383433323162393861313337626161393332646439 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.724000 audit: BPF prog-id=135 op=LOAD Jul 2 01:51:49.724000 audit[3263]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3053 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:49.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534643134313264383433323162393861313337626161393332646439 Jul 2 01:51:49.741000 audit: BPF prog-id=135 op=UNLOAD Jul 2 01:51:49.741000 audit: BPF prog-id=134 op=UNLOAD Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:49.741000 audit: BPF prog-id=136 op=LOAD Jul 2 01:51:49.741000 audit[3263]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3053 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:49.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534643134313264383433323162393861313337626161393332646439 Jul 2 01:51:50.285208 kubelet[2593]: E0702 01:51:50.285178 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:50.654816 systemd[1]: run-containerd-runc-k8s.io-e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af-runc.k2Fpzb.mount: Deactivated successfully. Jul 2 01:51:50.938101 env[1474]: time="2024-07-02T01:51:50.937982773Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 01:51:50.940773 systemd[1]: cri-containerd-e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af.scope: Deactivated successfully. Jul 2 01:51:50.944000 audit: BPF prog-id=136 op=UNLOAD Jul 2 01:51:50.958926 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af-rootfs.mount: Deactivated successfully. Jul 2 01:51:51.021390 kubelet[2593]: I0702 01:51:51.021364 2593 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.039670 2593 topology_manager.go:215] "Topology Admit Handler" podUID="20bf23aa-1ded-4718-82cb-2d137c2c86de" podNamespace="kube-system" podName="coredns-76f75df574-s245g" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.047502 2593 topology_manager.go:215] "Topology Admit Handler" podUID="8fffad01-6282-4f78-9e80-2fa542e83843" podNamespace="kube-system" podName="coredns-76f75df574-vqcs2" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.051241 2593 topology_manager.go:215] "Topology Admit Handler" podUID="d6e2b9c6-9cfa-4de3-8f96-e850beca355c" podNamespace="calico-system" podName="calico-kube-controllers-5fc9dd7769-qk68q" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.175909 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bmmtq\" (UniqueName: \"kubernetes.io/projected/20bf23aa-1ded-4718-82cb-2d137c2c86de-kube-api-access-bmmtq\") pod \"coredns-76f75df574-s245g\" (UID: \"20bf23aa-1ded-4718-82cb-2d137c2c86de\") " pod="kube-system/coredns-76f75df574-s245g" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.175948 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vp5kf\" (UniqueName: \"kubernetes.io/projected/8fffad01-6282-4f78-9e80-2fa542e83843-kube-api-access-vp5kf\") pod \"coredns-76f75df574-vqcs2\" (UID: \"8fffad01-6282-4f78-9e80-2fa542e83843\") " pod="kube-system/coredns-76f75df574-vqcs2" Jul 2 01:51:51.275611 kubelet[2593]: I0702 01:51:51.175974 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mvd9l\" (UniqueName: \"kubernetes.io/projected/d6e2b9c6-9cfa-4de3-8f96-e850beca355c-kube-api-access-mvd9l\") pod \"calico-kube-controllers-5fc9dd7769-qk68q\" (UID: \"d6e2b9c6-9cfa-4de3-8f96-e850beca355c\") " pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" Jul 2 01:51:51.045395 systemd[1]: Created slice kubepods-burstable-pod20bf23aa_1ded_4718_82cb_2d137c2c86de.slice. Jul 2 01:51:51.275969 kubelet[2593]: I0702 01:51:51.175998 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/20bf23aa-1ded-4718-82cb-2d137c2c86de-config-volume\") pod \"coredns-76f75df574-s245g\" (UID: \"20bf23aa-1ded-4718-82cb-2d137c2c86de\") " pod="kube-system/coredns-76f75df574-s245g" Jul 2 01:51:51.275969 kubelet[2593]: I0702 01:51:51.176025 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8fffad01-6282-4f78-9e80-2fa542e83843-config-volume\") pod \"coredns-76f75df574-vqcs2\" (UID: \"8fffad01-6282-4f78-9e80-2fa542e83843\") " pod="kube-system/coredns-76f75df574-vqcs2" Jul 2 01:51:51.275969 kubelet[2593]: I0702 01:51:51.176047 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d6e2b9c6-9cfa-4de3-8f96-e850beca355c-tigera-ca-bundle\") pod \"calico-kube-controllers-5fc9dd7769-qk68q\" (UID: \"d6e2b9c6-9cfa-4de3-8f96-e850beca355c\") " pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" Jul 2 01:51:51.059258 systemd[1]: Created slice kubepods-burstable-pod8fffad01_6282_4f78_9e80_2fa542e83843.slice. Jul 2 01:51:51.062673 systemd[1]: Created slice kubepods-besteffort-podd6e2b9c6_9cfa_4de3_8f96_e850beca355c.slice. Jul 2 01:51:51.577996 env[1474]: time="2024-07-02T01:51:51.577521631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-s245g,Uid:20bf23aa-1ded-4718-82cb-2d137c2c86de,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:51.583020 env[1474]: time="2024-07-02T01:51:51.582844448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5fc9dd7769-qk68q,Uid:d6e2b9c6-9cfa-4de3-8f96-e850beca355c,Namespace:calico-system,Attempt:0,}" Jul 2 01:51:51.583188 env[1474]: time="2024-07-02T01:51:51.583156565Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-vqcs2,Uid:8fffad01-6282-4f78-9e80-2fa542e83843,Namespace:kube-system,Attempt:0,}" Jul 2 01:51:52.099809 env[1474]: time="2024-07-02T01:51:52.099769500Z" level=info msg="shim disconnected" id=e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af Jul 2 01:51:52.100251 env[1474]: time="2024-07-02T01:51:52.100229134Z" level=warning msg="cleaning up after shim disconnected" id=e4d1412d84321b98a137baa932dd95a7826069a1aa94eb12e95c5e7891e002af namespace=k8s.io Jul 2 01:51:52.100352 env[1474]: time="2024-07-02T01:51:52.100317693Z" level=info msg="cleaning up dead shim" Jul 2 01:51:52.109283 env[1474]: time="2024-07-02T01:51:52.109253950Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:51:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3305 runtime=io.containerd.runc.v2\n" Jul 2 01:51:52.236758 env[1474]: time="2024-07-02T01:51:52.236683072Z" level=error msg="Failed to destroy network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.237071 env[1474]: time="2024-07-02T01:51:52.237033788Z" level=error msg="encountered an error cleaning up failed sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.237131 env[1474]: time="2024-07-02T01:51:52.237085948Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-s245g,Uid:20bf23aa-1ded-4718-82cb-2d137c2c86de,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.237347 kubelet[2593]: E0702 01:51:52.237314 2593 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.237575 kubelet[2593]: E0702 01:51:52.237385 2593 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-s245g" Jul 2 01:51:52.237575 kubelet[2593]: E0702 01:51:52.237407 2593 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-s245g" Jul 2 01:51:52.237575 kubelet[2593]: E0702 01:51:52.237456 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-s245g_kube-system(20bf23aa-1ded-4718-82cb-2d137c2c86de)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-s245g_kube-system(20bf23aa-1ded-4718-82cb-2d137c2c86de)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-s245g" podUID="20bf23aa-1ded-4718-82cb-2d137c2c86de" Jul 2 01:51:52.253619 env[1474]: time="2024-07-02T01:51:52.253561797Z" level=error msg="Failed to destroy network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.253952 env[1474]: time="2024-07-02T01:51:52.253896393Z" level=error msg="encountered an error cleaning up failed sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.254023 env[1474]: time="2024-07-02T01:51:52.253990512Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5fc9dd7769-qk68q,Uid:d6e2b9c6-9cfa-4de3-8f96-e850beca355c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.254642 kubelet[2593]: E0702 01:51:52.254228 2593 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.254642 kubelet[2593]: E0702 01:51:52.254275 2593 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" Jul 2 01:51:52.254642 kubelet[2593]: E0702 01:51:52.254325 2593 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" Jul 2 01:51:52.254803 kubelet[2593]: E0702 01:51:52.254392 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5fc9dd7769-qk68q_calico-system(d6e2b9c6-9cfa-4de3-8f96-e850beca355c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5fc9dd7769-qk68q_calico-system(d6e2b9c6-9cfa-4de3-8f96-e850beca355c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" podUID="d6e2b9c6-9cfa-4de3-8f96-e850beca355c" Jul 2 01:51:52.260809 env[1474]: time="2024-07-02T01:51:52.260759833Z" level=error msg="Failed to destroy network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.261110 env[1474]: time="2024-07-02T01:51:52.261076309Z" level=error msg="encountered an error cleaning up failed sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.261150 env[1474]: time="2024-07-02T01:51:52.261126989Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-vqcs2,Uid:8fffad01-6282-4f78-9e80-2fa542e83843,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.261734 kubelet[2593]: E0702 01:51:52.261321 2593 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.261734 kubelet[2593]: E0702 01:51:52.261389 2593 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-vqcs2" Jul 2 01:51:52.261734 kubelet[2593]: E0702 01:51:52.261408 2593 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-vqcs2" Jul 2 01:51:52.261889 kubelet[2593]: E0702 01:51:52.261472 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-vqcs2_kube-system(8fffad01-6282-4f78-9e80-2fa542e83843)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-vqcs2_kube-system(8fffad01-6282-4f78-9e80-2fa542e83843)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-vqcs2" podUID="8fffad01-6282-4f78-9e80-2fa542e83843" Jul 2 01:51:52.290096 systemd[1]: Created slice kubepods-besteffort-pod2ac2c28e_64f4_4665_a458_e30d1c8cbbcc.slice. Jul 2 01:51:52.292673 env[1474]: time="2024-07-02T01:51:52.292635944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-s29vz,Uid:2ac2c28e-64f4-4665-a458-e30d1c8cbbcc,Namespace:calico-system,Attempt:0,}" Jul 2 01:51:52.371562 env[1474]: time="2024-07-02T01:51:52.370349762Z" level=error msg="Failed to destroy network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.371562 env[1474]: time="2024-07-02T01:51:52.370707478Z" level=error msg="encountered an error cleaning up failed sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.371562 env[1474]: time="2024-07-02T01:51:52.370762598Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-s29vz,Uid:2ac2c28e-64f4-4665-a458-e30d1c8cbbcc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.371746 kubelet[2593]: E0702 01:51:52.371003 2593 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.371746 kubelet[2593]: E0702 01:51:52.371075 2593 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:52.371746 kubelet[2593]: E0702 01:51:52.371098 2593 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-s29vz" Jul 2 01:51:52.371848 kubelet[2593]: E0702 01:51:52.371169 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-s29vz_calico-system(2ac2c28e-64f4-4665-a458-e30d1c8cbbcc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-s29vz_calico-system(2ac2c28e-64f4-4665-a458-e30d1c8cbbcc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:52.424661 kubelet[2593]: I0702 01:51:52.424633 2593 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:51:52.425415 env[1474]: time="2024-07-02T01:51:52.425382084Z" level=info msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" Jul 2 01:51:52.428864 kubelet[2593]: I0702 01:51:52.428640 2593 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:51:52.430973 env[1474]: time="2024-07-02T01:51:52.430923460Z" level=info msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" Jul 2 01:51:52.433240 kubelet[2593]: I0702 01:51:52.433201 2593 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:51:52.435653 env[1474]: time="2024-07-02T01:51:52.435610886Z" level=info msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" Jul 2 01:51:52.445929 env[1474]: time="2024-07-02T01:51:52.445893447Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 01:51:52.458000 kubelet[2593]: I0702 01:51:52.457965 2593 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:51:52.458765 env[1474]: time="2024-07-02T01:51:52.458734058Z" level=info msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" Jul 2 01:51:52.492156 env[1474]: time="2024-07-02T01:51:52.492098151Z" level=error msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" failed" error="failed to destroy network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.492577 kubelet[2593]: E0702 01:51:52.492550 2593 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:51:52.492686 kubelet[2593]: E0702 01:51:52.492667 2593 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57"} Jul 2 01:51:52.492731 kubelet[2593]: E0702 01:51:52.492708 2593 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"20bf23aa-1ded-4718-82cb-2d137c2c86de\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 01:51:52.492784 kubelet[2593]: E0702 01:51:52.492763 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"20bf23aa-1ded-4718-82cb-2d137c2c86de\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-s245g" podUID="20bf23aa-1ded-4718-82cb-2d137c2c86de" Jul 2 01:51:52.498877 env[1474]: time="2024-07-02T01:51:52.498797313Z" level=error msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" failed" error="failed to destroy network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.499368 kubelet[2593]: E0702 01:51:52.499321 2593 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:51:52.499459 kubelet[2593]: E0702 01:51:52.499381 2593 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b"} Jul 2 01:51:52.499459 kubelet[2593]: E0702 01:51:52.499426 2593 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8fffad01-6282-4f78-9e80-2fa542e83843\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 01:51:52.499459 kubelet[2593]: E0702 01:51:52.499454 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8fffad01-6282-4f78-9e80-2fa542e83843\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-vqcs2" podUID="8fffad01-6282-4f78-9e80-2fa542e83843" Jul 2 01:51:52.507674 env[1474]: time="2024-07-02T01:51:52.507621411Z" level=error msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" failed" error="failed to destroy network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.508199 kubelet[2593]: E0702 01:51:52.508045 2593 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:51:52.508199 kubelet[2593]: E0702 01:51:52.508097 2593 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763"} Jul 2 01:51:52.508199 kubelet[2593]: E0702 01:51:52.508134 2593 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d6e2b9c6-9cfa-4de3-8f96-e850beca355c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 01:51:52.508199 kubelet[2593]: E0702 01:51:52.508172 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d6e2b9c6-9cfa-4de3-8f96-e850beca355c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" podUID="d6e2b9c6-9cfa-4de3-8f96-e850beca355c" Jul 2 01:51:52.523157 env[1474]: time="2024-07-02T01:51:52.523103591Z" level=error msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" failed" error="failed to destroy network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 01:51:52.523583 kubelet[2593]: E0702 01:51:52.523547 2593 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:51:52.523670 kubelet[2593]: E0702 01:51:52.523605 2593 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443"} Jul 2 01:51:52.523670 kubelet[2593]: E0702 01:51:52.523645 2593 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 01:51:52.523748 kubelet[2593]: E0702 01:51:52.523684 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-s29vz" podUID="2ac2c28e-64f4-4665-a458-e30d1c8cbbcc" Jul 2 01:51:53.153834 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b-shm.mount: Deactivated successfully. Jul 2 01:51:53.153917 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763-shm.mount: Deactivated successfully. Jul 2 01:51:53.153966 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57-shm.mount: Deactivated successfully. Jul 2 01:51:57.223515 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4234456094.mount: Deactivated successfully. Jul 2 01:51:57.267907 env[1474]: time="2024-07-02T01:51:57.267858722Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:57.276938 env[1474]: time="2024-07-02T01:51:57.276909825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d80cbd636ae2754a08d04558f0436508a17d92258e4712cc4a6299f43497607f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:57.280572 env[1474]: time="2024-07-02T01:51:57.280550985Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:57.287229 env[1474]: time="2024-07-02T01:51:57.287018596Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:51:57.287316 env[1474]: time="2024-07-02T01:51:57.287271753Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:d80cbd636ae2754a08d04558f0436508a17d92258e4712cc4a6299f43497607f\"" Jul 2 01:51:57.312611 env[1474]: time="2024-07-02T01:51:57.312572960Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 01:51:57.356939 env[1474]: time="2024-07-02T01:51:57.356896282Z" level=info msg="CreateContainer within sandbox \"a7b0a715db8a26362622e5e3aaac4c4682cb4db6515a205b58d75771a6cb32e6\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26\"" Jul 2 01:51:57.359118 env[1474]: time="2024-07-02T01:51:57.357805393Z" level=info msg="StartContainer for \"6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26\"" Jul 2 01:51:57.372741 systemd[1]: Started cri-containerd-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26.scope. Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394483 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 01:51:57.394564 kernel: audit: type=1400 audit(1719885117.389:985): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3053 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:57.437476 kernel: audit: type=1300 audit(1719885117.389:985): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3053 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:57.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662316564323738343935373239663833376331316139316563623061 Jul 2 01:51:57.461421 kernel: audit: type=1327 audit(1719885117.389:985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662316564323738343935373239663833376331316139316563623061 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.478981 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.479204 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.513166 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.530500 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.532156 env[1474]: time="2024-07-02T01:51:57.532117034Z" level=info msg="StartContainer for \"6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26\" returns successfully" Jul 2 01:51:57.548909 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.565561 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.581661 kernel: audit: type=1400 audit(1719885117.389:986): avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.389000 audit: BPF prog-id=137 op=LOAD Jul 2 01:51:57.389000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3053 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:57.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662316564323738343935373239663833376331316139316563623061 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.394000 audit: BPF prog-id=138 op=LOAD Jul 2 01:51:57.394000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3053 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:57.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662316564323738343935373239663833376331316139316563623061 Jul 2 01:51:57.411000 audit: BPF prog-id=138 op=UNLOAD Jul 2 01:51:57.411000 audit: BPF prog-id=137 op=UNLOAD Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:51:57.411000 audit: BPF prog-id=139 op=LOAD Jul 2 01:51:57.411000 audit[3536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3053 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:57.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662316564323738343935373239663833376331316139316563623061 Jul 2 01:51:57.887193 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 01:51:57.887347 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 01:51:58.516845 kubelet[2593]: I0702 01:51:58.516554 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-brm5z" podStartSLOduration=2.6135029530000002 podStartE2EDuration="17.516510101s" podCreationTimestamp="2024-07-02 01:51:41 +0000 UTC" firstStartedPulling="2024-07-02 01:51:42.385193915 +0000 UTC m=+23.222630486" lastFinishedPulling="2024-07-02 01:51:57.288201103 +0000 UTC m=+38.125637634" observedRunningTime="2024-07-02 01:51:58.516402142 +0000 UTC m=+39.353838753" watchObservedRunningTime="2024-07-02 01:51:58.516510101 +0000 UTC m=+39.353946672" Jul 2 01:51:59.167000 audit[3663]: AVC avc: denied { write } for pid=3663 comm="tee" name="fd" dev="proc" ino=24260 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.167000 audit[3663]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdea22a0d a2=241 a3=1b6 items=1 ppid=3633 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.167000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 01:51:59.167000 audit: PATH item=0 name="/dev/fd/63" inode=25048 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.167000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.172000 audit[3667]: AVC avc: denied { write } for pid=3667 comm="tee" name="fd" dev="proc" ino=24269 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.172000 audit[3667]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff68a1a0c a2=241 a3=1b6 items=1 ppid=3628 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.172000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 01:51:59.172000 audit: PATH item=0 name="/dev/fd/63" inode=24256 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.175000 audit[3669]: AVC avc: denied { write } for pid=3669 comm="tee" name="fd" dev="proc" ino=24275 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.175000 audit[3669]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcdc08a0e a2=241 a3=1b6 items=1 ppid=3626 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.175000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 01:51:59.175000 audit: PATH item=0 name="/dev/fd/63" inode=24257 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.175000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.178000 audit[3678]: AVC avc: denied { write } for pid=3678 comm="tee" name="fd" dev="proc" ino=24279 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.178000 audit[3678]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa9589fc a2=241 a3=1b6 items=1 ppid=3635 pid=3678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.178000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 01:51:59.178000 audit: PATH item=0 name="/dev/fd/63" inode=24262 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.178000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.183000 audit[3688]: AVC avc: denied { write } for pid=3688 comm="tee" name="fd" dev="proc" ino=24285 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.183000 audit[3688]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe0905a0c a2=241 a3=1b6 items=1 ppid=3631 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.183000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 01:51:59.183000 audit: PATH item=0 name="/dev/fd/63" inode=25055 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.183000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.191000 audit[3696]: AVC avc: denied { write } for pid=3696 comm="tee" name="fd" dev="proc" ino=24294 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.191000 audit[3696]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff828ba0c a2=241 a3=1b6 items=1 ppid=3630 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.191000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 01:51:59.191000 audit: PATH item=0 name="/dev/fd/63" inode=25060 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.191000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:51:59.192000 audit[3698]: AVC avc: denied { write } for pid=3698 comm="tee" name="fd" dev="proc" ino=24298 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 01:51:59.192000 audit[3698]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff9dd09fd a2=241 a3=1b6 items=1 ppid=3659 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:51:59.192000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 01:51:59.192000 audit: PATH item=0 name="/dev/fd/63" inode=24291 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 01:51:59.192000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 01:52:04.285446 env[1474]: time="2024-07-02T01:52:04.285395960Z" level=info msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] k8s.go 608: Cleaning up netns ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" iface="eth0" netns="/var/run/netns/cni-35c4ec10-8917-d10c-14d0-b099f0fadec8" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" iface="eth0" netns="/var/run/netns/cni-35c4ec10-8917-d10c-14d0-b099f0fadec8" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" iface="eth0" netns="/var/run/netns/cni-35c4ec10-8917-d10c-14d0-b099f0fadec8" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] k8s.go 615: Releasing IP address(es) ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.330 [INFO][3834] utils.go 188: Calico CNI releasing IP address ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.347 [INFO][3840] ipam_plugin.go 411: Releasing address using handleID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.347 [INFO][3840] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.347 [INFO][3840] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.358 [WARNING][3840] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.358 [INFO][3840] ipam_plugin.go 439: Releasing address using workloadID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.359 [INFO][3840] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:04.361485 env[1474]: 2024-07-02 01:52:04.360 [INFO][3834] k8s.go 621: Teardown processing complete. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:04.364478 env[1474]: time="2024-07-02T01:52:04.364429663Z" level=info msg="TearDown network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" successfully" Jul 2 01:52:04.364573 env[1474]: time="2024-07-02T01:52:04.364555822Z" level=info msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" returns successfully" Jul 2 01:52:04.365505 systemd[1]: run-netns-cni\x2d35c4ec10\x2d8917\x2dd10c\x2d14d0\x2db099f0fadec8.mount: Deactivated successfully. Jul 2 01:52:04.366589 env[1474]: time="2024-07-02T01:52:04.366562922Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-s29vz,Uid:2ac2c28e-64f4-4665-a458-e30d1c8cbbcc,Namespace:calico-system,Attempt:1,}" Jul 2 01:52:04.527875 systemd-networkd[1625]: calif8a05f728be: Link UP Jul 2 01:52:04.539485 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif8a05f728be: link becomes ready Jul 2 01:52:04.539234 systemd-networkd[1625]: calif8a05f728be: Gained carrier Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.434 [INFO][3846] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.445 [INFO][3846] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0 csi-node-driver- calico-system 2ac2c28e-64f4-4665-a458-e30d1c8cbbcc 711 0 2024-07-02 01:51:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 csi-node-driver-s29vz eth0 default [] [] [kns.calico-system ksa.calico-system.default] calif8a05f728be [] []}} ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.445 [INFO][3846] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.471 [INFO][3859] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" HandleID="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.482 [INFO][3859] ipam_plugin.go 264: Auto assigning IP ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" HandleID="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002edd80), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"csi-node-driver-s29vz", "timestamp":"2024-07-02 01:52:04.471016175 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.482 [INFO][3859] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.482 [INFO][3859] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.482 [INFO][3859] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.485 [INFO][3859] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.488 [INFO][3859] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.491 [INFO][3859] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.493 [INFO][3859] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.495 [INFO][3859] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.495 [INFO][3859] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.496 [INFO][3859] ipam.go 1685: Creating new handle: k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.499 [INFO][3859] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.502 [INFO][3859] ipam.go 1216: Successfully claimed IPs: [192.168.114.193/26] block=192.168.114.192/26 handle="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.502 [INFO][3859] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.193/26] handle="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.502 [INFO][3859] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:04.545570 env[1474]: 2024-07-02 01:52:04.503 [INFO][3859] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.193/26] IPv6=[] ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" HandleID="k8s-pod-network.ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.504 [INFO][3846] k8s.go 386: Populated endpoint ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc", ResourceVersion:"711", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"csi-node-driver-s29vz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.114.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif8a05f728be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.505 [INFO][3846] k8s.go 387: Calico CNI using IPs: [192.168.114.193/32] ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.505 [INFO][3846] dataplane_linux.go 68: Setting the host side veth name to calif8a05f728be ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.526 [INFO][3846] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.527 [INFO][3846] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc", ResourceVersion:"711", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d", Pod:"csi-node-driver-s29vz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.114.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif8a05f728be", MAC:"ae:59:e9:8f:73:17", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:04.546118 env[1474]: 2024-07-02 01:52:04.544 [INFO][3846] k8s.go 500: Wrote updated endpoint to datastore ContainerID="ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d" Namespace="calico-system" Pod="csi-node-driver-s29vz" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:04.563626 env[1474]: time="2024-07-02T01:52:04.563564545Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:04.563814 env[1474]: time="2024-07-02T01:52:04.563792343Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:04.563912 env[1474]: time="2024-07-02T01:52:04.563892102Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:04.564122 env[1474]: time="2024-07-02T01:52:04.564095780Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d pid=3893 runtime=io.containerd.runc.v2 Jul 2 01:52:04.586830 systemd[1]: Started cri-containerd-ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d.scope. Jul 2 01:52:04.623875 kernel: kauditd_printk_skb: 68 callbacks suppressed Jul 2 01:52:04.623992 kernel: audit: type=1400 audit(1719885124.601:998): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.643031 kernel: audit: type=1400 audit(1719885124.601:999): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.660860 kernel: audit: type=1400 audit(1719885124.601:1000): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.699157 kernel: audit: type=1400 audit(1719885124.601:1001): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.699241 kernel: audit: type=1400 audit(1719885124.601:1002): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.700260 env[1474]: time="2024-07-02T01:52:04.700217802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-s29vz,Uid:2ac2c28e-64f4-4665-a458-e30d1c8cbbcc,Namespace:calico-system,Attempt:1,} returns sandbox id \"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d\"" Jul 2 01:52:04.701924 env[1474]: time="2024-07-02T01:52:04.701904145Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.719364 kernel: audit: type=1400 audit(1719885124.601:1003): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.736089 kernel: audit: type=1400 audit(1719885124.601:1004): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.753008 kernel: audit: type=1400 audit(1719885124.601:1005): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.770579 kernel: audit: type=1400 audit(1719885124.601:1006): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.788225 kernel: audit: type=1400 audit(1719885124.606:1007): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.606000 audit: BPF prog-id=140 op=LOAD Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3893 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:04.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564353165303437346138633435613964663332373033366566613533 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3893 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:04.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564353165303437346138633435613964663332373033366566613533 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit: BPF prog-id=141 op=LOAD Jul 2 01:52:04.624000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3893 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:04.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564353165303437346138633435613964663332373033366566613533 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit: BPF prog-id=142 op=LOAD Jul 2 01:52:04.624000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3893 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:04.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564353165303437346138633435613964663332373033366566613533 Jul 2 01:52:04.624000 audit: BPF prog-id=142 op=UNLOAD Jul 2 01:52:04.624000 audit: BPF prog-id=141 op=UNLOAD Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:04.624000 audit: BPF prog-id=143 op=LOAD Jul 2 01:52:04.624000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3893 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:04.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564353165303437346138633435613964663332373033366566613533 Jul 2 01:52:05.286916 env[1474]: time="2024-07-02T01:52:05.286658470Z" level=info msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" Jul 2 01:52:05.287506 env[1474]: time="2024-07-02T01:52:05.287471782Z" level=info msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.349 [INFO][3967] k8s.go 608: Cleaning up netns ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.349 [INFO][3967] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" iface="eth0" netns="/var/run/netns/cni-0ec86aa3-142b-3902-9d4c-2cbff8ccf119" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.349 [INFO][3967] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" iface="eth0" netns="/var/run/netns/cni-0ec86aa3-142b-3902-9d4c-2cbff8ccf119" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.350 [INFO][3967] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" iface="eth0" netns="/var/run/netns/cni-0ec86aa3-142b-3902-9d4c-2cbff8ccf119" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.350 [INFO][3967] k8s.go 615: Releasing IP address(es) ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.350 [INFO][3967] utils.go 188: Calico CNI releasing IP address ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.384 [INFO][3979] ipam_plugin.go 411: Releasing address using handleID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.386 [INFO][3979] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.386 [INFO][3979] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.394 [WARNING][3979] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.394 [INFO][3979] ipam_plugin.go 439: Releasing address using workloadID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.397 [INFO][3979] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:05.400469 env[1474]: 2024-07-02 01:52:05.399 [INFO][3967] k8s.go 621: Teardown processing complete. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:05.404465 env[1474]: time="2024-07-02T01:52:05.402778703Z" level=info msg="TearDown network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" successfully" Jul 2 01:52:05.404465 env[1474]: time="2024-07-02T01:52:05.402816222Z" level=info msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" returns successfully" Jul 2 01:52:05.404465 env[1474]: time="2024-07-02T01:52:05.404243248Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-s245g,Uid:20bf23aa-1ded-4718-82cb-2d137c2c86de,Namespace:kube-system,Attempt:1,}" Jul 2 01:52:05.402635 systemd[1]: run-netns-cni\x2d0ec86aa3\x2d142b\x2d3902\x2d9d4c\x2d2cbff8ccf119.mount: Deactivated successfully. Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.357 [INFO][3968] k8s.go 608: Cleaning up netns ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.364 [INFO][3968] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" iface="eth0" netns="/var/run/netns/cni-8622453f-42c2-19e1-31b3-eadc5dc5f661" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.364 [INFO][3968] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" iface="eth0" netns="/var/run/netns/cni-8622453f-42c2-19e1-31b3-eadc5dc5f661" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.364 [INFO][3968] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" iface="eth0" netns="/var/run/netns/cni-8622453f-42c2-19e1-31b3-eadc5dc5f661" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.364 [INFO][3968] k8s.go 615: Releasing IP address(es) ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.364 [INFO][3968] utils.go 188: Calico CNI releasing IP address ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.411 [INFO][3983] ipam_plugin.go 411: Releasing address using handleID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.411 [INFO][3983] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.412 [INFO][3983] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.421 [WARNING][3983] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.421 [INFO][3983] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.422 [INFO][3983] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:05.435476 env[1474]: 2024-07-02 01:52:05.432 [INFO][3968] k8s.go 621: Teardown processing complete. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:05.438367 systemd[1]: run-netns-cni\x2d8622453f\x2d42c2\x2d19e1\x2d31b3\x2deadc5dc5f661.mount: Deactivated successfully. Jul 2 01:52:05.439630 env[1474]: time="2024-07-02T01:52:05.439589705Z" level=info msg="TearDown network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" successfully" Jul 2 01:52:05.439730 env[1474]: time="2024-07-02T01:52:05.439714024Z" level=info msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" returns successfully" Jul 2 01:52:05.440412 env[1474]: time="2024-07-02T01:52:05.440385417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-vqcs2,Uid:8fffad01-6282-4f78-9e80-2fa542e83843,Namespace:kube-system,Attempt:1,}" Jul 2 01:52:05.661052 systemd-networkd[1625]: cali7b87befe0b7: Link UP Jul 2 01:52:05.674460 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 01:52:05.674566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7b87befe0b7: link becomes ready Jul 2 01:52:05.676751 systemd-networkd[1625]: cali7b87befe0b7: Gained carrier Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.545 [INFO][3993] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.557 [INFO][3993] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0 coredns-76f75df574- kube-system 20bf23aa-1ded-4718-82cb-2d137c2c86de 719 0 2024-07-02 01:51:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 coredns-76f75df574-s245g eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7b87befe0b7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.557 [INFO][3993] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.581 [INFO][4006] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" HandleID="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.591 [INFO][4006] ipam_plugin.go 264: Auto assigning IP ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" HandleID="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400028fde0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"coredns-76f75df574-s245g", "timestamp":"2024-07-02 01:52:05.58116717 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.607 [INFO][4006] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.607 [INFO][4006] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.607 [INFO][4006] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.611 [INFO][4006] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.623 [INFO][4006] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.630 [INFO][4006] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.636 [INFO][4006] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.640 [INFO][4006] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.640 [INFO][4006] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.642 [INFO][4006] ipam.go 1685: Creating new handle: k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.646 [INFO][4006] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.655 [INFO][4006] ipam.go 1216: Successfully claimed IPs: [192.168.114.194/26] block=192.168.114.192/26 handle="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.655 [INFO][4006] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.194/26] handle="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.655 [INFO][4006] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:05.694946 env[1474]: 2024-07-02 01:52:05.655 [INFO][4006] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.194/26] IPv6=[] ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" HandleID="k8s-pod-network.33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.659 [INFO][3993] k8s.go 386: Populated endpoint ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"20bf23aa-1ded-4718-82cb-2d137c2c86de", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"coredns-76f75df574-s245g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7b87befe0b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.659 [INFO][3993] k8s.go 387: Calico CNI using IPs: [192.168.114.194/32] ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.659 [INFO][3993] dataplane_linux.go 68: Setting the host side veth name to cali7b87befe0b7 ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.662 [INFO][3993] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.677 [INFO][3993] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"20bf23aa-1ded-4718-82cb-2d137c2c86de", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec", Pod:"coredns-76f75df574-s245g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7b87befe0b7", MAC:"3a:f1:69:18:0e:90", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:05.695643 env[1474]: 2024-07-02 01:52:05.692 [INFO][3993] k8s.go 500: Wrote updated endpoint to datastore ContainerID="33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec" Namespace="kube-system" Pod="coredns-76f75df574-s245g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:05.736383 env[1474]: time="2024-07-02T01:52:05.735533191Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:05.736383 env[1474]: time="2024-07-02T01:52:05.735574030Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:05.736383 env[1474]: time="2024-07-02T01:52:05.735594230Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:05.736687 env[1474]: time="2024-07-02T01:52:05.736655420Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec pid=4059 runtime=io.containerd.runc.v2 Jul 2 01:52:05.750267 systemd[1]: Started cri-containerd-33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec.scope. Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.771000 audit: BPF prog-id=144 op=LOAD Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4059 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333653863343937373162303134333739646331326633383038623634 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4059 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333653863343937373162303134333739646331326633383038623634 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit: BPF prog-id=145 op=LOAD Jul 2 01:52:05.772000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4059 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333653863343937373162303134333739646331326633383038623634 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit: BPF prog-id=146 op=LOAD Jul 2 01:52:05.772000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4059 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333653863343937373162303134333739646331326633383038623634 Jul 2 01:52:05.772000 audit: BPF prog-id=146 op=UNLOAD Jul 2 01:52:05.772000 audit: BPF prog-id=145 op=UNLOAD Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { perfmon } for pid=4070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit[4070]: AVC avc: denied { bpf } for pid=4070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.772000 audit: BPF prog-id=147 op=LOAD Jul 2 01:52:05.772000 audit[4070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4059 pid=4070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333653863343937373162303134333739646331326633383038623634 Jul 2 01:52:05.799261 systemd-networkd[1625]: cali23ba19b6db4: Link UP Jul 2 01:52:05.809223 systemd-networkd[1625]: cali23ba19b6db4: Gained carrier Jul 2 01:52:05.809456 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali23ba19b6db4: link becomes ready Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.645 [INFO][4020] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.687 [INFO][4020] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0 coredns-76f75df574- kube-system 8fffad01-6282-4f78-9e80-2fa542e83843 720 0 2024-07-02 01:51:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 coredns-76f75df574-vqcs2 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali23ba19b6db4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.687 [INFO][4020] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.734 [INFO][4045] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" HandleID="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.754 [INFO][4045] ipam_plugin.go 264: Auto assigning IP ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" HandleID="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000263b40), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"coredns-76f75df574-vqcs2", "timestamp":"2024-07-02 01:52:05.734219924 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.754 [INFO][4045] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.754 [INFO][4045] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.754 [INFO][4045] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.757 [INFO][4045] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.762 [INFO][4045] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.776 [INFO][4045] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.777 [INFO][4045] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.779 [INFO][4045] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.779 [INFO][4045] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.781 [INFO][4045] ipam.go 1685: Creating new handle: k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710 Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.787 [INFO][4045] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.794 [INFO][4045] ipam.go 1216: Successfully claimed IPs: [192.168.114.195/26] block=192.168.114.192/26 handle="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.794 [INFO][4045] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.195/26] handle="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.794 [INFO][4045] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:05.826257 env[1474]: 2024-07-02 01:52:05.794 [INFO][4045] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.195/26] IPv6=[] ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" HandleID="k8s-pod-network.d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.795 [INFO][4020] k8s.go 386: Populated endpoint ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"8fffad01-6282-4f78-9e80-2fa542e83843", ResourceVersion:"720", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"coredns-76f75df574-vqcs2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali23ba19b6db4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.796 [INFO][4020] k8s.go 387: Calico CNI using IPs: [192.168.114.195/32] ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.796 [INFO][4020] dataplane_linux.go 68: Setting the host side veth name to cali23ba19b6db4 ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.810 [INFO][4020] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.810 [INFO][4020] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"8fffad01-6282-4f78-9e80-2fa542e83843", ResourceVersion:"720", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710", Pod:"coredns-76f75df574-vqcs2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali23ba19b6db4", MAC:"fa:bd:8e:ed:31:0d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:05.826942 env[1474]: 2024-07-02 01:52:05.824 [INFO][4020] k8s.go 500: Wrote updated endpoint to datastore ContainerID="d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710" Namespace="kube-system" Pod="coredns-76f75df574-vqcs2" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:05.828382 env[1474]: time="2024-07-02T01:52:05.827828414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-s245g,Uid:20bf23aa-1ded-4718-82cb-2d137c2c86de,Namespace:kube-system,Attempt:1,} returns sandbox id \"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec\"" Jul 2 01:52:05.830940 env[1474]: time="2024-07-02T01:52:05.830816825Z" level=info msg="CreateContainer within sandbox \"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 01:52:05.856866 env[1474]: time="2024-07-02T01:52:05.856492976Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:05.856866 env[1474]: time="2024-07-02T01:52:05.856532696Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:05.856866 env[1474]: time="2024-07-02T01:52:05.856542456Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:05.857095 env[1474]: time="2024-07-02T01:52:05.856906972Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710 pid=4120 runtime=io.containerd.runc.v2 Jul 2 01:52:05.872081 systemd[1]: Started cri-containerd-d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710.scope. Jul 2 01:52:05.878182 env[1474]: time="2024-07-02T01:52:05.877172615Z" level=info msg="CreateContainer within sandbox \"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a27afa4876baa5ab695de3605901122987ebee104e3465bcac0650c33d065692\"" Jul 2 01:52:05.880254 env[1474]: time="2024-07-02T01:52:05.880225666Z" level=info msg="StartContainer for \"a27afa4876baa5ab695de3605901122987ebee104e3465bcac0650c33d065692\"" Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit: BPF prog-id=148 op=LOAD Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4120 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436666430613635353066393533633935633263623030366162333533 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4120 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436666430613635353066393533633935633263623030366162333533 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.891000 audit: BPF prog-id=149 op=LOAD Jul 2 01:52:05.891000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4120 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436666430613635353066393533633935633263623030366162333533 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit: BPF prog-id=150 op=LOAD Jul 2 01:52:05.892000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4120 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436666430613635353066393533633935633263623030366162333533 Jul 2 01:52:05.892000 audit: BPF prog-id=150 op=UNLOAD Jul 2 01:52:05.892000 audit: BPF prog-id=149 op=UNLOAD Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.892000 audit: BPF prog-id=151 op=LOAD Jul 2 01:52:05.892000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4120 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436666430613635353066393533633935633263623030366162333533 Jul 2 01:52:05.904951 systemd[1]: Started cri-containerd-a27afa4876baa5ab695de3605901122987ebee104e3465bcac0650c33d065692.scope. Jul 2 01:52:05.925170 env[1474]: time="2024-07-02T01:52:05.918900250Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-vqcs2,Uid:8fffad01-6282-4f78-9e80-2fa542e83843,Namespace:kube-system,Attempt:1,} returns sandbox id \"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710\"" Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit: BPF prog-id=152 op=LOAD Jul 2 01:52:05.928981 env[1474]: time="2024-07-02T01:52:05.928942472Z" level=info msg="CreateContainer within sandbox \"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4059 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132376166613438373662616135616236393564653336303539303131 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4059 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132376166613438373662616135616236393564653336303539303131 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.928000 audit: BPF prog-id=153 op=LOAD Jul 2 01:52:05.928000 audit[4155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4059 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132376166613438373662616135616236393564653336303539303131 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit: BPF prog-id=154 op=LOAD Jul 2 01:52:05.929000 audit[4155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4059 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132376166613438373662616135616236393564653336303539303131 Jul 2 01:52:05.929000 audit: BPF prog-id=154 op=UNLOAD Jul 2 01:52:05.929000 audit: BPF prog-id=153 op=UNLOAD Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit[4155]: AVC avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:05.929000 audit: BPF prog-id=155 op=LOAD Jul 2 01:52:05.929000 audit[4155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4059 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:05.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132376166613438373662616135616236393564653336303539303131 Jul 2 01:52:05.951746 env[1474]: time="2024-07-02T01:52:05.951706211Z" level=info msg="StartContainer for \"a27afa4876baa5ab695de3605901122987ebee104e3465bcac0650c33d065692\" returns successfully" Jul 2 01:52:05.975414 env[1474]: time="2024-07-02T01:52:05.975361742Z" level=info msg="CreateContainer within sandbox \"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d56d22ccef261079f9355d1d6768058ff6bab16be87ea3ae6d06ef9c45075321\"" Jul 2 01:52:05.976143 env[1474]: time="2024-07-02T01:52:05.976116814Z" level=info msg="StartContainer for \"d56d22ccef261079f9355d1d6768058ff6bab16be87ea3ae6d06ef9c45075321\"" Jul 2 01:52:05.991353 systemd[1]: Started cri-containerd-d56d22ccef261079f9355d1d6768058ff6bab16be87ea3ae6d06ef9c45075321.scope. Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.005000 audit: BPF prog-id=156 op=LOAD Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4120 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435366432326363656632363130373966393335356431643637363830 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4120 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435366432326363656632363130373966393335356431643637363830 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.006000 audit: BPF prog-id=157 op=LOAD Jul 2 01:52:06.006000 audit[4194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4120 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435366432326363656632363130373966393335356431643637363830 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.007000 audit: BPF prog-id=158 op=LOAD Jul 2 01:52:06.007000 audit[4194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4120 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435366432326363656632363130373966393335356431643637363830 Jul 2 01:52:06.008000 audit: BPF prog-id=158 op=UNLOAD Jul 2 01:52:06.008000 audit: BPF prog-id=157 op=UNLOAD Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { perfmon } for pid=4194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit[4194]: AVC avc: denied { bpf } for pid=4194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.008000 audit: BPF prog-id=159 op=LOAD Jul 2 01:52:06.008000 audit[4194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4120 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435366432326363656632363130373966393335356431643637363830 Jul 2 01:52:06.027297 env[1474]: time="2024-07-02T01:52:06.027248761Z" level=info msg="StartContainer for \"d56d22ccef261079f9355d1d6768058ff6bab16be87ea3ae6d06ef9c45075321\" returns successfully" Jul 2 01:52:06.449440 systemd-networkd[1625]: calif8a05f728be: Gained IPv6LL Jul 2 01:52:06.504674 kubelet[2593]: I0702 01:52:06.504644 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-vqcs2" podStartSLOduration=31.5045955 podStartE2EDuration="31.5045955s" podCreationTimestamp="2024-07-02 01:51:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:52:06.504243303 +0000 UTC m=+47.341679874" watchObservedRunningTime="2024-07-02 01:52:06.5045955 +0000 UTC m=+47.342032031" Jul 2 01:52:06.548228 kubelet[2593]: I0702 01:52:06.548179 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-s245g" podStartSLOduration=31.548131322 podStartE2EDuration="31.548131322s" podCreationTimestamp="2024-07-02 01:51:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 01:52:06.525345581 +0000 UTC m=+47.362782192" watchObservedRunningTime="2024-07-02 01:52:06.548131322 +0000 UTC m=+47.385567893" Jul 2 01:52:06.565000 audit[4226]: NETFILTER_CFG table=filter:100 family=2 entries=16 op=nft_register_rule pid=4226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:06.565000 audit[4226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff4030630 a2=0 a3=1 items=0 ppid=2729 pid=4226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:06.566000 audit[4226]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=4226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:06.566000 audit[4226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff4030630 a2=0 a3=1 items=0 ppid=2729 pid=4226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.566000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:06.574000 audit[4228]: NETFILTER_CFG table=filter:102 family=2 entries=13 op=nft_register_rule pid=4228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:06.574000 audit[4228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffcd175ce0 a2=0 a3=1 items=0 ppid=2729 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.574000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:06.594000 audit[4228]: NETFILTER_CFG table=nat:103 family=2 entries=45 op=nft_register_chain pid=4228 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:06.594000 audit[4228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19092 a0=3 a1=ffffcd175ce0 a2=0 a3=1 items=0 ppid=2729 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.594000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:06.639300 env[1474]: time="2024-07-02T01:52:06.639257407Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:06.647380 env[1474]: time="2024-07-02T01:52:06.647347250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:94ad0dc71bacd91f470c20e61073c2dc00648fd583c0fb95657dee38af05e5ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:06.653196 env[1474]: time="2024-07-02T01:52:06.653151434Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:06.658619 env[1474]: time="2024-07-02T01:52:06.658582822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:06.659236 env[1474]: time="2024-07-02T01:52:06.659202616Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:94ad0dc71bacd91f470c20e61073c2dc00648fd583c0fb95657dee38af05e5ed\"" Jul 2 01:52:06.662965 env[1474]: time="2024-07-02T01:52:06.662932740Z" level=info msg="CreateContainer within sandbox \"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 01:52:06.693244 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount60247346.mount: Deactivated successfully. Jul 2 01:52:06.708772 env[1474]: time="2024-07-02T01:52:06.708686541Z" level=info msg="CreateContainer within sandbox \"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"051960991a1a3334b13b844dd9c00de35ae512474b568a1216ff3616cf45afa1\"" Jul 2 01:52:06.709749 env[1474]: time="2024-07-02T01:52:06.709426134Z" level=info msg="StartContainer for \"051960991a1a3334b13b844dd9c00de35ae512474b568a1216ff3616cf45afa1\"" Jul 2 01:52:06.732452 systemd[1]: Started cri-containerd-051960991a1a3334b13b844dd9c00de35ae512474b568a1216ff3616cf45afa1.scope. Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3893 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035313936303939316131613333333462313362383434646439633030 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit: BPF prog-id=160 op=LOAD Jul 2 01:52:06.754000 audit[4239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3893 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035313936303939316131613333333462313362383434646439633030 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit: BPF prog-id=161 op=LOAD Jul 2 01:52:06.754000 audit[4239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3893 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035313936303939316131613333333462313362383434646439633030 Jul 2 01:52:06.754000 audit: BPF prog-id=161 op=UNLOAD Jul 2 01:52:06.754000 audit: BPF prog-id=160 op=UNLOAD Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { perfmon } for pid=4239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit[4239]: AVC avc: denied { bpf } for pid=4239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:06.754000 audit: BPF prog-id=162 op=LOAD Jul 2 01:52:06.754000 audit[4239]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3893 pid=4239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:06.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035313936303939316131613333333462313362383434646439633030 Jul 2 01:52:06.770625 env[1474]: time="2024-07-02T01:52:06.770576267Z" level=info msg="StartContainer for \"051960991a1a3334b13b844dd9c00de35ae512474b568a1216ff3616cf45afa1\" returns successfully" Jul 2 01:52:06.773524 env[1474]: time="2024-07-02T01:52:06.773236682Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 01:52:07.089462 systemd-networkd[1625]: cali7b87befe0b7: Gained IPv6LL Jul 2 01:52:07.363859 systemd[1]: run-containerd-runc-k8s.io-051960991a1a3334b13b844dd9c00de35ae512474b568a1216ff3616cf45afa1-runc.5PyHQX.mount: Deactivated successfully. Jul 2 01:52:07.409472 systemd-networkd[1625]: cali23ba19b6db4: Gained IPv6LL Jul 2 01:52:08.285942 env[1474]: time="2024-07-02T01:52:08.285905179Z" level=info msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" Jul 2 01:52:08.305928 env[1474]: time="2024-07-02T01:52:08.305877831Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:08.317374 env[1474]: time="2024-07-02T01:52:08.313861957Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f708eddd5878891da5bc6148fc8bb3f7277210481a15957910fe5fb551a5ed28,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:08.320151 env[1474]: time="2024-07-02T01:52:08.320124178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:08.324521 env[1474]: time="2024-07-02T01:52:08.324491857Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:08.325207 env[1474]: time="2024-07-02T01:52:08.324895893Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:f708eddd5878891da5bc6148fc8bb3f7277210481a15957910fe5fb551a5ed28\"" Jul 2 01:52:08.327244 env[1474]: time="2024-07-02T01:52:08.327219111Z" level=info msg="CreateContainer within sandbox \"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 01:52:08.357455 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount578737293.mount: Deactivated successfully. Jul 2 01:52:08.376782 env[1474]: time="2024-07-02T01:52:08.376722807Z" level=info msg="CreateContainer within sandbox \"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"ef6ca36453fe6af89e41f937923bd7b27b26bea705f87afbb126b1143a872985\"" Jul 2 01:52:08.377757 env[1474]: time="2024-07-02T01:52:08.377727998Z" level=info msg="StartContainer for \"ef6ca36453fe6af89e41f937923bd7b27b26bea705f87afbb126b1143a872985\"" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] k8s.go 608: Cleaning up netns ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" iface="eth0" netns="/var/run/netns/cni-217f82d8-1e32-e0a4-181f-01a731c97c30" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" iface="eth0" netns="/var/run/netns/cni-217f82d8-1e32-e0a4-181f-01a731c97c30" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" iface="eth0" netns="/var/run/netns/cni-217f82d8-1e32-e0a4-181f-01a731c97c30" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] k8s.go 615: Releasing IP address(es) ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.337 [INFO][4317] utils.go 188: Calico CNI releasing IP address ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.367 [INFO][4324] ipam_plugin.go 411: Releasing address using handleID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.368 [INFO][4324] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.368 [INFO][4324] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.375 [WARNING][4324] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.375 [INFO][4324] ipam_plugin.go 439: Releasing address using workloadID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.377 [INFO][4324] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:08.383497 env[1474]: 2024-07-02 01:52:08.382 [INFO][4317] k8s.go 621: Teardown processing complete. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:08.386850 systemd[1]: run-netns-cni\x2d217f82d8\x2d1e32\x2de0a4\x2d181f\x2d01a731c97c30.mount: Deactivated successfully. Jul 2 01:52:08.388970 env[1474]: time="2024-07-02T01:52:08.388937533Z" level=info msg="TearDown network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" successfully" Jul 2 01:52:08.389111 env[1474]: time="2024-07-02T01:52:08.389094291Z" level=info msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" returns successfully" Jul 2 01:52:08.389862 env[1474]: time="2024-07-02T01:52:08.389838004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5fc9dd7769-qk68q,Uid:d6e2b9c6-9cfa-4de3-8f96-e850beca355c,Namespace:calico-system,Attempt:1,}" Jul 2 01:52:08.410119 systemd[1]: run-containerd-runc-k8s.io-ef6ca36453fe6af89e41f937923bd7b27b26bea705f87afbb126b1143a872985-runc.zhdKlY.mount: Deactivated successfully. Jul 2 01:52:08.417104 systemd[1]: Started cri-containerd-ef6ca36453fe6af89e41f937923bd7b27b26bea705f87afbb126b1143a872985.scope. Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3893 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566366361333634353366653661663839653431663933373932336264 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.429000 audit: BPF prog-id=163 op=LOAD Jul 2 01:52:08.429000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3893 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566366361333634353366653661663839653431663933373932336264 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.430000 audit: BPF prog-id=164 op=LOAD Jul 2 01:52:08.430000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3893 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566366361333634353366653661663839653431663933373932336264 Jul 2 01:52:08.430000 audit: BPF prog-id=164 op=UNLOAD Jul 2 01:52:08.431000 audit: BPF prog-id=163 op=UNLOAD Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.431000 audit: BPF prog-id=165 op=LOAD Jul 2 01:52:08.431000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3893 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566366361333634353366653661663839653431663933373932336264 Jul 2 01:52:08.450176 env[1474]: time="2024-07-02T01:52:08.450134119Z" level=info msg="StartContainer for \"ef6ca36453fe6af89e41f937923bd7b27b26bea705f87afbb126b1143a872985\" returns successfully" Jul 2 01:52:08.562718 systemd-networkd[1625]: cali811911cc54b: Link UP Jul 2 01:52:08.567358 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali811911cc54b: link becomes ready Jul 2 01:52:08.568003 systemd-networkd[1625]: cali811911cc54b: Gained carrier Jul 2 01:52:08.583728 kubelet[2593]: I0702 01:52:08.583682 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-s29vz" podStartSLOduration=22.95948821 podStartE2EDuration="26.583638507s" podCreationTimestamp="2024-07-02 01:51:42 +0000 UTC" firstStartedPulling="2024-07-02 01:52:04.701549949 +0000 UTC m=+45.538986520" lastFinishedPulling="2024-07-02 01:52:08.325700286 +0000 UTC m=+49.163136817" observedRunningTime="2024-07-02 01:52:08.526082806 +0000 UTC m=+49.363519377" watchObservedRunningTime="2024-07-02 01:52:08.583638507 +0000 UTC m=+49.421075078" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.466 [INFO][4364] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.477 [INFO][4364] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0 calico-kube-controllers-5fc9dd7769- calico-system d6e2b9c6-9cfa-4de3-8f96-e850beca355c 759 0 2024-07-02 01:51:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5fc9dd7769 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 calico-kube-controllers-5fc9dd7769-qk68q eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali811911cc54b [] []}} ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.477 [INFO][4364] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.500 [INFO][4378] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" HandleID="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.523 [INFO][4378] ipam_plugin.go 264: Auto assigning IP ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" HandleID="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002edd80), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"calico-kube-controllers-5fc9dd7769-qk68q", "timestamp":"2024-07-02 01:52:08.500842643 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.523 [INFO][4378] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.523 [INFO][4378] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.523 [INFO][4378] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.530 [INFO][4378] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.536 [INFO][4378] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.544 [INFO][4378] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.546 [INFO][4378] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.548 [INFO][4378] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.548 [INFO][4378] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.549 [INFO][4378] ipam.go 1685: Creating new handle: k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9 Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.552 [INFO][4378] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.556 [INFO][4378] ipam.go 1216: Successfully claimed IPs: [192.168.114.196/26] block=192.168.114.192/26 handle="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.556 [INFO][4378] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.196/26] handle="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.556 [INFO][4378] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:08.585663 env[1474]: 2024-07-02 01:52:08.556 [INFO][4378] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.196/26] IPv6=[] ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" HandleID="k8s-pod-network.1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.557 [INFO][4364] k8s.go 386: Populated endpoint ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0", GenerateName:"calico-kube-controllers-5fc9dd7769-", Namespace:"calico-system", SelfLink:"", UID:"d6e2b9c6-9cfa-4de3-8f96-e850beca355c", ResourceVersion:"759", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5fc9dd7769", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"calico-kube-controllers-5fc9dd7769-qk68q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.114.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali811911cc54b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.557 [INFO][4364] k8s.go 387: Calico CNI using IPs: [192.168.114.196/32] ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.557 [INFO][4364] dataplane_linux.go 68: Setting the host side veth name to cali811911cc54b ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.559 [INFO][4364] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.577 [INFO][4364] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0", GenerateName:"calico-kube-controllers-5fc9dd7769-", Namespace:"calico-system", SelfLink:"", UID:"d6e2b9c6-9cfa-4de3-8f96-e850beca355c", ResourceVersion:"759", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5fc9dd7769", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9", Pod:"calico-kube-controllers-5fc9dd7769-qk68q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.114.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali811911cc54b", MAC:"aa:a0:7e:a5:75:f0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:08.586171 env[1474]: 2024-07-02 01:52:08.584 [INFO][4364] k8s.go 500: Wrote updated endpoint to datastore ContainerID="1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9" Namespace="calico-system" Pod="calico-kube-controllers-5fc9dd7769-qk68q" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:08.600735 env[1474]: time="2024-07-02T01:52:08.600675667Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:08.600811 env[1474]: time="2024-07-02T01:52:08.600752066Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:08.600811 env[1474]: time="2024-07-02T01:52:08.600776066Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:08.600967 env[1474]: time="2024-07-02T01:52:08.600935945Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9 pid=4404 runtime=io.containerd.runc.v2 Jul 2 01:52:08.611518 systemd[1]: Started cri-containerd-1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9.scope. Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.632000 audit: BPF prog-id=166 op=LOAD Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4404 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393463333135393264353562303861623830333137343231623930 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4404 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393463333135393264353562303861623830333137343231623930 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit: BPF prog-id=167 op=LOAD Jul 2 01:52:08.633000 audit[4413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4404 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393463333135393264353562303861623830333137343231623930 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit: BPF prog-id=168 op=LOAD Jul 2 01:52:08.633000 audit[4413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4404 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393463333135393264353562303861623830333137343231623930 Jul 2 01:52:08.633000 audit: BPF prog-id=168 op=UNLOAD Jul 2 01:52:08.633000 audit: BPF prog-id=167 op=UNLOAD Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { perfmon } for pid=4413 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit[4413]: AVC avc: denied { bpf } for pid=4413 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:08.633000 audit: BPF prog-id=169 op=LOAD Jul 2 01:52:08.633000 audit[4413]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4404 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:08.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393463333135393264353562303861623830333137343231623930 Jul 2 01:52:08.650708 env[1474]: time="2024-07-02T01:52:08.650667158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5fc9dd7769-qk68q,Uid:d6e2b9c6-9cfa-4de3-8f96-e850beca355c,Namespace:calico-system,Attempt:1,} returns sandbox id \"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9\"" Jul 2 01:52:08.654031 env[1474]: time="2024-07-02T01:52:08.654003527Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 01:52:09.241362 kubelet[2593]: I0702 01:52:09.240822 2593 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 01:52:09.270000 audit[4461]: NETFILTER_CFG table=filter:104 family=2 entries=9 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:09.270000 audit[4461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffce451e60 a2=0 a3=1 items=0 ppid=2729 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:09.271000 audit[4461]: NETFILTER_CFG table=nat:105 family=2 entries=25 op=nft_register_chain pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:09.271000 audit[4461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8580 a0=3 a1=ffffce451e60 a2=0 a3=1 items=0 ppid=2729 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.271000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:09.380682 kubelet[2593]: I0702 01:52:09.380650 2593 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 01:52:09.380826 kubelet[2593]: I0702 01:52:09.380691 2593 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 01:52:09.797165 kernel: kauditd_printk_skb: 436 callbacks suppressed Jul 2 01:52:09.797271 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.814400 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.814478 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.836018 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.836105 kernel: audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.858085 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.858167 kernel: audit: backlog limit exceeded Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.877720 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.877783 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.900026 kernel: audit: type=1400 audit(1719885129.774:1124): avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.774000 audit: BPF prog-id=170 op=LOAD Jul 2 01:52:09.774000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc242a848 a2=70 a3=ffffc242a8b8 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.774000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.779000 audit: BPF prog-id=170 op=UNLOAD Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.779000 audit: BPF prog-id=171 op=LOAD Jul 2 01:52:09.779000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc242a848 a2=70 a3=4b243c items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.779000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.796000 audit: BPF prog-id=171 op=UNLOAD Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc242a800 a2=70 a3=ffffc242a870 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit: BPF prog-id=172 op=LOAD Jul 2 01:52:09.796000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc242a7e8 a2=70 a3=ffffc242a858 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.796000 audit: BPF prog-id=172 op=UNLOAD Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc242a8b8 a2=70 a3=0 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc242a8a8 a2=70 a3=0 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.796000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.796000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc242a818 a2=70 a3=0 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.802000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.802000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc242a8f0 a2=70 a3=26e1748f items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.802000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.802000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc242a8f0 a2=70 a3=26e1748f items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.803000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.803000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.803000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.803000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.803000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.803000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc242a818 a2=70 a3=26e174a9 items=0 ppid=4465 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.803000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 01:52:09.905470 systemd-networkd[1625]: cali811911cc54b: Gained IPv6LL Jul 2 01:52:09.904000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.904000 audit[4517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffed37ee28 a2=70 a3=ffffed37ee98 items=0 ppid=4465 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.904000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 01:52:09.904000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:09.904000 audit[4517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffed37ecf8 a2=70 a3=ffffed37ed68 items=0 ppid=4465 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:09.904000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 01:52:09.910000 audit: BPF prog-id=173 op=UNLOAD Jul 2 01:52:09.968148 systemd-networkd[1625]: vxlan.calico: Link UP Jul 2 01:52:09.968156 systemd-networkd[1625]: vxlan.calico: Gained carrier Jul 2 01:52:10.226000 audit[4585]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=4585 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:10.226000 audit[4585]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff155fb00 a2=0 a3=ffff8232bfa8 items=0 ppid=4465 pid=4585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.226000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:10.268000 audit[4583]: NETFILTER_CFG table=raw:107 family=2 entries=19 op=nft_register_chain pid=4583 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:10.268000 audit[4583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6992 a0=3 a1=ffffe5982660 a2=0 a3=ffff9b6f7fa8 items=0 ppid=4465 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.268000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:10.313000 audit[4584]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=4584 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:10.313000 audit[4584]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffdbf398b0 a2=0 a3=ffff9210cfa8 items=0 ppid=4465 pid=4584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.313000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:10.316000 audit[4586]: NETFILTER_CFG table=filter:109 family=2 entries=147 op=nft_register_chain pid=4586 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:10.316000 audit[4586]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=83712 a0=3 a1=ffffe490b4e0 a2=0 a3=ffff90498fa8 items=0 ppid=4465 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.316000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:10.605320 env[1474]: time="2024-07-02T01:52:10.605249939Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:10.611795 env[1474]: time="2024-07-02T01:52:10.611760039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89df47edb6965978d3683de1cac38ee5b47d7054332bbea7cc0ef3b3c17da2e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:10.615960 env[1474]: time="2024-07-02T01:52:10.615934041Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:10.622431 env[1474]: time="2024-07-02T01:52:10.622376422Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:10.623122 env[1474]: time="2024-07-02T01:52:10.623090575Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:89df47edb6965978d3683de1cac38ee5b47d7054332bbea7cc0ef3b3c17da2e1\"" Jul 2 01:52:10.639645 env[1474]: time="2024-07-02T01:52:10.639604144Z" level=info msg="CreateContainer within sandbox \"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 01:52:10.673291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1820611853.mount: Deactivated successfully. Jul 2 01:52:10.691679 env[1474]: time="2024-07-02T01:52:10.691636506Z" level=info msg="CreateContainer within sandbox \"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc\"" Jul 2 01:52:10.692614 env[1474]: time="2024-07-02T01:52:10.692583618Z" level=info msg="StartContainer for \"9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc\"" Jul 2 01:52:10.712273 systemd[1]: Started cri-containerd-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc.scope. Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit: BPF prog-id=174 op=LOAD Jul 2 01:52:10.727000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[4603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4404 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966656138373161323033333630653838366533623135333262643336 Jul 2 01:52:10.727000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.727000 audit[4603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4404 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966656138373161323033333630653838366533623135333262643336 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit: BPF prog-id=175 op=LOAD Jul 2 01:52:10.728000 audit[4603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4404 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966656138373161323033333630653838366533623135333262643336 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit: BPF prog-id=176 op=LOAD Jul 2 01:52:10.728000 audit[4603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4404 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966656138373161323033333630653838366533623135333262643336 Jul 2 01:52:10.728000 audit: BPF prog-id=176 op=UNLOAD Jul 2 01:52:10.728000 audit: BPF prog-id=175 op=UNLOAD Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { perfmon } for pid=4603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit[4603]: AVC avc: denied { bpf } for pid=4603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:10.728000 audit: BPF prog-id=177 op=LOAD Jul 2 01:52:10.728000 audit[4603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4404 pid=4603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:10.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966656138373161323033333630653838366533623135333262643336 Jul 2 01:52:10.750519 env[1474]: time="2024-07-02T01:52:10.750470167Z" level=info msg="StartContainer for \"9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc\" returns successfully" Jul 2 01:52:11.535597 kubelet[2593]: I0702 01:52:11.535550 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5fc9dd7769-qk68q" podStartSLOduration=27.564154233 podStartE2EDuration="29.53550974s" podCreationTimestamp="2024-07-02 01:51:42 +0000 UTC" firstStartedPulling="2024-07-02 01:52:08.651968026 +0000 UTC m=+49.489404597" lastFinishedPulling="2024-07-02 01:52:10.623323533 +0000 UTC m=+51.460760104" observedRunningTime="2024-07-02 01:52:11.535078864 +0000 UTC m=+52.372515435" watchObservedRunningTime="2024-07-02 01:52:11.53550974 +0000 UTC m=+52.372946311" Jul 2 01:52:11.763604 systemd-networkd[1625]: vxlan.calico: Gained IPv6LL Jul 2 01:52:15.315000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.322124 kernel: kauditd_printk_skb: 148 callbacks suppressed Jul 2 01:52:15.322287 kernel: audit: type=1400 audit(1719885135.315:1162): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.315000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9a140 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:15.369978 kernel: audit: type=1300 audit(1719885135.315:1162): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9a140 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:15.315000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:15.392975 kernel: audit: type=1327 audit(1719885135.315:1162): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:15.317000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.414349 kernel: audit: type=1400 audit(1719885135.317:1163): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.414501 kernel: audit: type=1300 audit(1719885135.317:1163): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c109c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:15.317000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c109c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:15.317000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:15.465047 kernel: audit: type=1327 audit(1719885135.317:1163): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:15.669000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.669000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40051b9e30 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.718327 kernel: audit: type=1400 audit(1719885135.669:1164): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.718607 kernel: audit: type=1300 audit(1719885135.669:1164): arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40051b9e30 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.669000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.741262 kernel: audit: type=1327 audit(1719885135.669:1164): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.676000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.763390 kernel: audit: type=1400 audit(1719885135.676:1165): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.676000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400444dad0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.690000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.690000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.690000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=400444dbc0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.690000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4004ed4000 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.690000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.690000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.767000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.767000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40097e9e60 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:15.767000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:15.767000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400474acc0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:52:15.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:52:19.285790 env[1474]: time="2024-07-02T01:52:19.285744200Z" level=info msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.322 [WARNING][4677] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"8fffad01-6282-4f78-9e80-2fa542e83843", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710", Pod:"coredns-76f75df574-vqcs2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali23ba19b6db4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.322 [INFO][4677] k8s.go 608: Cleaning up netns ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.322 [INFO][4677] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" iface="eth0" netns="" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.322 [INFO][4677] k8s.go 615: Releasing IP address(es) ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.323 [INFO][4677] utils.go 188: Calico CNI releasing IP address ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.345 [INFO][4683] ipam_plugin.go 411: Releasing address using handleID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.345 [INFO][4683] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.345 [INFO][4683] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.354 [WARNING][4683] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.354 [INFO][4683] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.356 [INFO][4683] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.359363 env[1474]: 2024-07-02 01:52:19.358 [INFO][4677] k8s.go 621: Teardown processing complete. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.359958 env[1474]: time="2024-07-02T01:52:19.359925858Z" level=info msg="TearDown network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" successfully" Jul 2 01:52:19.360025 env[1474]: time="2024-07-02T01:52:19.360009817Z" level=info msg="StopPodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" returns successfully" Jul 2 01:52:19.361494 env[1474]: time="2024-07-02T01:52:19.361453245Z" level=info msg="RemovePodSandbox for \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" Jul 2 01:52:19.361578 env[1474]: time="2024-07-02T01:52:19.361499765Z" level=info msg="Forcibly stopping sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\"" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.395 [WARNING][4702] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"8fffad01-6282-4f78-9e80-2fa542e83843", ResourceVersion:"744", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"d6fd0a6550f953c95c2cb006ab353c0306f3a8f3fc19ce3c4878f47b6855d710", Pod:"coredns-76f75df574-vqcs2", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali23ba19b6db4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.396 [INFO][4702] k8s.go 608: Cleaning up netns ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.396 [INFO][4702] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" iface="eth0" netns="" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.396 [INFO][4702] k8s.go 615: Releasing IP address(es) ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.396 [INFO][4702] utils.go 188: Calico CNI releasing IP address ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.414 [INFO][4708] ipam_plugin.go 411: Releasing address using handleID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.414 [INFO][4708] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.414 [INFO][4708] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.422 [WARNING][4708] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.423 [INFO][4708] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" HandleID="k8s-pod-network.5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--vqcs2-eth0" Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.425 [INFO][4708] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.427899 env[1474]: 2024-07-02 01:52:19.426 [INFO][4702] k8s.go 621: Teardown processing complete. ContainerID="5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b" Jul 2 01:52:19.428351 env[1474]: time="2024-07-02T01:52:19.427940887Z" level=info msg="TearDown network for sandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" successfully" Jul 2 01:52:19.436282 env[1474]: time="2024-07-02T01:52:19.436222058Z" level=info msg="RemovePodSandbox \"5bf185636850f0c4862d891ba96271ea68318c03ef64e861f299965c0420ea2b\" returns successfully" Jul 2 01:52:19.436829 env[1474]: time="2024-07-02T01:52:19.436798973Z" level=info msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.493 [WARNING][4726] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc", ResourceVersion:"763", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d", Pod:"csi-node-driver-s29vz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.114.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif8a05f728be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.493 [INFO][4726] k8s.go 608: Cleaning up netns ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.493 [INFO][4726] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" iface="eth0" netns="" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.493 [INFO][4726] k8s.go 615: Releasing IP address(es) ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.493 [INFO][4726] utils.go 188: Calico CNI releasing IP address ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.512 [INFO][4733] ipam_plugin.go 411: Releasing address using handleID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.512 [INFO][4733] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.512 [INFO][4733] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.520 [WARNING][4733] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.520 [INFO][4733] ipam_plugin.go 439: Releasing address using workloadID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.522 [INFO][4733] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.524026 env[1474]: 2024-07-02 01:52:19.523 [INFO][4726] k8s.go 621: Teardown processing complete. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.524501 env[1474]: time="2024-07-02T01:52:19.524055601Z" level=info msg="TearDown network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" successfully" Jul 2 01:52:19.524501 env[1474]: time="2024-07-02T01:52:19.524084721Z" level=info msg="StopPodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" returns successfully" Jul 2 01:52:19.525006 env[1474]: time="2024-07-02T01:52:19.524976193Z" level=info msg="RemovePodSandbox for \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" Jul 2 01:52:19.525146 env[1474]: time="2024-07-02T01:52:19.525104592Z" level=info msg="Forcibly stopping sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\"" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.561 [WARNING][4751] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2ac2c28e-64f4-4665-a458-e30d1c8cbbcc", ResourceVersion:"763", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"ed51e0474a8c45a9df327036efa53f2d0ef8fbe51c83ba14c99f15e25893b84d", Pod:"csi-node-driver-s29vz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.114.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif8a05f728be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.561 [INFO][4751] k8s.go 608: Cleaning up netns ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.561 [INFO][4751] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" iface="eth0" netns="" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.561 [INFO][4751] k8s.go 615: Releasing IP address(es) ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.562 [INFO][4751] utils.go 188: Calico CNI releasing IP address ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.579 [INFO][4757] ipam_plugin.go 411: Releasing address using handleID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.580 [INFO][4757] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.580 [INFO][4757] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.588 [WARNING][4757] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.589 [INFO][4757] ipam_plugin.go 439: Releasing address using workloadID ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" HandleID="k8s-pod-network.aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Workload="ci--3510.3.5--a--b4a22a1448-k8s-csi--node--driver--s29vz-eth0" Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.590 [INFO][4757] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.593743 env[1474]: 2024-07-02 01:52:19.591 [INFO][4751] k8s.go 621: Teardown processing complete. ContainerID="aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443" Jul 2 01:52:19.593743 env[1474]: time="2024-07-02T01:52:19.592728865Z" level=info msg="TearDown network for sandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" successfully" Jul 2 01:52:19.602716 env[1474]: time="2024-07-02T01:52:19.602629422Z" level=info msg="RemovePodSandbox \"aee6c2e12b60c3ba8f028a0ba6b952139c089f9ac3733de296c71a55c2c5f443\" returns successfully" Jul 2 01:52:19.603226 env[1474]: time="2024-07-02T01:52:19.603193057Z" level=info msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.641 [WARNING][4775] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"20bf23aa-1ded-4718-82cb-2d137c2c86de", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec", Pod:"coredns-76f75df574-s245g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7b87befe0b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.641 [INFO][4775] k8s.go 608: Cleaning up netns ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.641 [INFO][4775] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" iface="eth0" netns="" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.641 [INFO][4775] k8s.go 615: Releasing IP address(es) ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.642 [INFO][4775] utils.go 188: Calico CNI releasing IP address ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.660 [INFO][4782] ipam_plugin.go 411: Releasing address using handleID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.661 [INFO][4782] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.661 [INFO][4782] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.669 [WARNING][4782] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.669 [INFO][4782] ipam_plugin.go 439: Releasing address using workloadID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.670 [INFO][4782] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.672588 env[1474]: 2024-07-02 01:52:19.671 [INFO][4775] k8s.go 621: Teardown processing complete. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.673010 env[1474]: time="2024-07-02T01:52:19.672618795Z" level=info msg="TearDown network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" successfully" Jul 2 01:52:19.673010 env[1474]: time="2024-07-02T01:52:19.672647434Z" level=info msg="StopPodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" returns successfully" Jul 2 01:52:19.673546 env[1474]: time="2024-07-02T01:52:19.673508067Z" level=info msg="RemovePodSandbox for \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" Jul 2 01:52:19.673621 env[1474]: time="2024-07-02T01:52:19.673546427Z" level=info msg="Forcibly stopping sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\"" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.705 [WARNING][4800] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"20bf23aa-1ded-4718-82cb-2d137c2c86de", ResourceVersion:"739", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"33e8c49771b014379dc12f3808b6438a3356e6db66491d4bdc49c0441a7c78ec", Pod:"coredns-76f75df574-s245g", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.114.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7b87befe0b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.705 [INFO][4800] k8s.go 608: Cleaning up netns ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.705 [INFO][4800] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" iface="eth0" netns="" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.705 [INFO][4800] k8s.go 615: Releasing IP address(es) ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.705 [INFO][4800] utils.go 188: Calico CNI releasing IP address ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.724 [INFO][4807] ipam_plugin.go 411: Releasing address using handleID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.724 [INFO][4807] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.724 [INFO][4807] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.732 [WARNING][4807] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.733 [INFO][4807] ipam_plugin.go 439: Releasing address using workloadID ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" HandleID="k8s-pod-network.44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Workload="ci--3510.3.5--a--b4a22a1448-k8s-coredns--76f75df574--s245g-eth0" Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.736 [INFO][4807] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.738211 env[1474]: 2024-07-02 01:52:19.737 [INFO][4800] k8s.go 621: Teardown processing complete. ContainerID="44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57" Jul 2 01:52:19.738770 env[1474]: time="2024-07-02T01:52:19.738733360Z" level=info msg="TearDown network for sandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" successfully" Jul 2 01:52:19.748255 env[1474]: time="2024-07-02T01:52:19.748220280Z" level=info msg="RemovePodSandbox \"44af5606c3d25615d29c538c1cba5ddff68e801e167a302ab01dbaf5b61e7d57\" returns successfully" Jul 2 01:52:19.748966 env[1474]: time="2024-07-02T01:52:19.748883115Z" level=info msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.781 [WARNING][4826] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0", GenerateName:"calico-kube-controllers-5fc9dd7769-", Namespace:"calico-system", SelfLink:"", UID:"d6e2b9c6-9cfa-4de3-8f96-e850beca355c", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5fc9dd7769", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9", Pod:"calico-kube-controllers-5fc9dd7769-qk68q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.114.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali811911cc54b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.781 [INFO][4826] k8s.go 608: Cleaning up netns ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.781 [INFO][4826] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" iface="eth0" netns="" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.781 [INFO][4826] k8s.go 615: Releasing IP address(es) ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.781 [INFO][4826] utils.go 188: Calico CNI releasing IP address ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.799 [INFO][4832] ipam_plugin.go 411: Releasing address using handleID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.799 [INFO][4832] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.799 [INFO][4832] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.808 [WARNING][4832] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.808 [INFO][4832] ipam_plugin.go 439: Releasing address using workloadID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.810 [INFO][4832] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.812072 env[1474]: 2024-07-02 01:52:19.811 [INFO][4826] k8s.go 621: Teardown processing complete. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.812537 env[1474]: time="2024-07-02T01:52:19.812112064Z" level=info msg="TearDown network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" successfully" Jul 2 01:52:19.812537 env[1474]: time="2024-07-02T01:52:19.812143984Z" level=info msg="StopPodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" returns successfully" Jul 2 01:52:19.812627 env[1474]: time="2024-07-02T01:52:19.812594940Z" level=info msg="RemovePodSandbox for \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" Jul 2 01:52:19.812663 env[1474]: time="2024-07-02T01:52:19.812630260Z" level=info msg="Forcibly stopping sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\"" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.846 [WARNING][4851] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0", GenerateName:"calico-kube-controllers-5fc9dd7769-", Namespace:"calico-system", SelfLink:"", UID:"d6e2b9c6-9cfa-4de3-8f96-e850beca355c", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 51, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5fc9dd7769", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"1794c31592d55b08ab80317421b909521ae0d60984c594eb9c5da14ab77645a9", Pod:"calico-kube-controllers-5fc9dd7769-qk68q", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.114.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali811911cc54b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.846 [INFO][4851] k8s.go 608: Cleaning up netns ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.846 [INFO][4851] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" iface="eth0" netns="" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.846 [INFO][4851] k8s.go 615: Releasing IP address(es) ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.846 [INFO][4851] utils.go 188: Calico CNI releasing IP address ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.866 [INFO][4857] ipam_plugin.go 411: Releasing address using handleID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.866 [INFO][4857] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.866 [INFO][4857] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.874 [WARNING][4857] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.874 [INFO][4857] ipam_plugin.go 439: Releasing address using workloadID ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" HandleID="k8s-pod-network.d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--kube--controllers--5fc9dd7769--qk68q-eth0" Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.876 [INFO][4857] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:19.880424 env[1474]: 2024-07-02 01:52:19.878 [INFO][4851] k8s.go 621: Teardown processing complete. ContainerID="d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763" Jul 2 01:52:19.880934 env[1474]: time="2024-07-02T01:52:19.880887007Z" level=info msg="TearDown network for sandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" successfully" Jul 2 01:52:19.890262 env[1474]: time="2024-07-02T01:52:19.890222209Z" level=info msg="RemovePodSandbox \"d697605e560b782024b48613ad6d67a0865823843b72407e5b0f549a6ff8e763\" returns successfully" Jul 2 01:52:20.455000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.461676 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 2 01:52:20.461764 kernel: audit: type=1400 audit(1719885140.455:1170): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.455000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013f34c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.510531 kernel: audit: type=1300 audit(1719885140.455:1170): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013f34c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.510645 kernel: audit: type=1327 audit(1719885140.455:1170): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.459000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.554953 kernel: audit: type=1400 audit(1719885140.459:1171): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.555024 kernel: audit: type=1300 audit(1719885140.459:1171): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9ab60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.459000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9ab60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.459000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.605261 kernel: audit: type=1327 audit(1719885140.459:1171): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.460000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.626374 kernel: audit: type=1400 audit(1719885140.460:1172): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.626498 kernel: audit: type=1300 audit(1719885140.460:1172): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9ab80 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.460000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9ab80 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.460000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.677722 kernel: audit: type=1327 audit(1719885140.460:1172): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.699119 kernel: audit: type=1400 audit(1719885140.461:1173): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:52:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013f37e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:52:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:52:21.608287 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.hbdfSB.mount: Deactivated successfully. Jul 2 01:52:25.970670 kubelet[2593]: I0702 01:52:25.970632 2593 topology_manager.go:215] "Topology Admit Handler" podUID="2b8ae71f-feef-4ce8-962e-e5fda1140771" podNamespace="calico-apiserver" podName="calico-apiserver-6b5bd4454d-ztj5g" Jul 2 01:52:25.976126 systemd[1]: Created slice kubepods-besteffort-pod2b8ae71f_feef_4ce8_962e_e5fda1140771.slice. Jul 2 01:52:25.980042 kubelet[2593]: W0702 01:52:25.979994 2593 reflector.go:539] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.5-a-b4a22a1448" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.5-a-b4a22a1448' and this object Jul 2 01:52:25.980042 kubelet[2593]: E0702 01:52:25.980044 2593 reflector.go:147] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.5-a-b4a22a1448" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.5-a-b4a22a1448' and this object Jul 2 01:52:25.980183 kubelet[2593]: W0702 01:52:25.979994 2593 reflector.go:539] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.5-a-b4a22a1448" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.5-a-b4a22a1448' and this object Jul 2 01:52:25.980183 kubelet[2593]: E0702 01:52:25.980061 2593 reflector.go:147] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510.3.5-a-b4a22a1448" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510.3.5-a-b4a22a1448' and this object Jul 2 01:52:25.981815 kubelet[2593]: I0702 01:52:25.981789 2593 topology_manager.go:215] "Topology Admit Handler" podUID="5fd43d6c-b239-4718-83f4-9942c7e155de" podNamespace="calico-apiserver" podName="calico-apiserver-6b5bd4454d-k9qss" Jul 2 01:52:25.986545 systemd[1]: Created slice kubepods-besteffort-pod5fd43d6c_b239_4718_83f4_9942c7e155de.slice. Jul 2 01:52:26.015000 audit[4921]: NETFILTER_CFG table=filter:110 family=2 entries=9 op=nft_register_rule pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.021481 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 2 01:52:26.021574 kernel: audit: type=1325 audit(1719885146.015:1174): table=filter:110 family=2 entries=9 op=nft_register_rule pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.015000 audit[4921]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffea89a190 a2=0 a3=1 items=0 ppid=2729 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.060263 kernel: audit: type=1300 audit(1719885146.015:1174): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffea89a190 a2=0 a3=1 items=0 ppid=2729 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.015000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.074067 kernel: audit: type=1327 audit(1719885146.015:1174): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.016000 audit[4921]: NETFILTER_CFG table=nat:111 family=2 entries=20 op=nft_register_rule pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.088486 kernel: audit: type=1325 audit(1719885146.016:1175): table=nat:111 family=2 entries=20 op=nft_register_rule pid=4921 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.016000 audit[4921]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffea89a190 a2=0 a3=1 items=0 ppid=2729 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.104965 kubelet[2593]: I0702 01:52:26.104932 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5fd43d6c-b239-4718-83f4-9942c7e155de-calico-apiserver-certs\") pod \"calico-apiserver-6b5bd4454d-k9qss\" (UID: \"5fd43d6c-b239-4718-83f4-9942c7e155de\") " pod="calico-apiserver/calico-apiserver-6b5bd4454d-k9qss" Jul 2 01:52:26.105150 kubelet[2593]: I0702 01:52:26.105137 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2b8ae71f-feef-4ce8-962e-e5fda1140771-calico-apiserver-certs\") pod \"calico-apiserver-6b5bd4454d-ztj5g\" (UID: \"2b8ae71f-feef-4ce8-962e-e5fda1140771\") " pod="calico-apiserver/calico-apiserver-6b5bd4454d-ztj5g" Jul 2 01:52:26.105248 kubelet[2593]: I0702 01:52:26.105236 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-756ck\" (UniqueName: \"kubernetes.io/projected/5fd43d6c-b239-4718-83f4-9942c7e155de-kube-api-access-756ck\") pod \"calico-apiserver-6b5bd4454d-k9qss\" (UID: \"5fd43d6c-b239-4718-83f4-9942c7e155de\") " pod="calico-apiserver/calico-apiserver-6b5bd4454d-k9qss" Jul 2 01:52:26.105367 kubelet[2593]: I0702 01:52:26.105355 2593 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2sjn8\" (UniqueName: \"kubernetes.io/projected/2b8ae71f-feef-4ce8-962e-e5fda1140771-kube-api-access-2sjn8\") pod \"calico-apiserver-6b5bd4454d-ztj5g\" (UID: \"2b8ae71f-feef-4ce8-962e-e5fda1140771\") " pod="calico-apiserver/calico-apiserver-6b5bd4454d-ztj5g" Jul 2 01:52:26.115374 kernel: audit: type=1300 audit(1719885146.016:1175): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffea89a190 a2=0 a3=1 items=0 ppid=2729 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.115475 kernel: audit: type=1327 audit(1719885146.016:1175): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.116000 audit[4923]: NETFILTER_CFG table=filter:112 family=2 entries=10 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.140773 kernel: audit: type=1325 audit(1719885146.116:1176): table=filter:112 family=2 entries=10 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.116000 audit[4923]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=fffffc215890 a2=0 a3=1 items=0 ppid=2729 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.167056 kernel: audit: type=1300 audit(1719885146.116:1176): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=fffffc215890 a2=0 a3=1 items=0 ppid=2729 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.180811 kernel: audit: type=1327 audit(1719885146.116:1176): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.180880 kernel: audit: type=1325 audit(1719885146.120:1177): table=nat:113 family=2 entries=20 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:26.120000 audit[4923]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:26.120000 audit[4923]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffffc215890 a2=0 a3=1 items=0 ppid=2729 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:26.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:27.213942 kubelet[2593]: E0702 01:52:27.213912 2593 projected.go:294] Couldn't get configMap calico-apiserver/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.214264 kubelet[2593]: E0702 01:52:27.214251 2593 projected.go:200] Error preparing data for projected volume kube-api-access-756ck for pod calico-apiserver/calico-apiserver-6b5bd4454d-k9qss: failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.214404 kubelet[2593]: E0702 01:52:27.214381 2593 projected.go:294] Couldn't get configMap calico-apiserver/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.214404 kubelet[2593]: E0702 01:52:27.214404 2593 projected.go:200] Error preparing data for projected volume kube-api-access-2sjn8 for pod calico-apiserver/calico-apiserver-6b5bd4454d-ztj5g: failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.214521 kubelet[2593]: E0702 01:52:27.214509 2593 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/5fd43d6c-b239-4718-83f4-9942c7e155de-kube-api-access-756ck podName:5fd43d6c-b239-4718-83f4-9942c7e155de nodeName:}" failed. No retries permitted until 2024-07-02 01:52:27.714486575 +0000 UTC m=+68.551923146 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-756ck" (UniqueName: "kubernetes.io/projected/5fd43d6c-b239-4718-83f4-9942c7e155de-kube-api-access-756ck") pod "calico-apiserver-6b5bd4454d-k9qss" (UID: "5fd43d6c-b239-4718-83f4-9942c7e155de") : failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.214636 kubelet[2593]: E0702 01:52:27.214623 2593 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/2b8ae71f-feef-4ce8-962e-e5fda1140771-kube-api-access-2sjn8 podName:2b8ae71f-feef-4ce8-962e-e5fda1140771 nodeName:}" failed. No retries permitted until 2024-07-02 01:52:27.714610174 +0000 UTC m=+68.552046745 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-2sjn8" (UniqueName: "kubernetes.io/projected/2b8ae71f-feef-4ce8-962e-e5fda1140771-kube-api-access-2sjn8") pod "calico-apiserver-6b5bd4454d-ztj5g" (UID: "2b8ae71f-feef-4ce8-962e-e5fda1140771") : failed to sync configmap cache: timed out waiting for the condition Jul 2 01:52:27.781731 env[1474]: time="2024-07-02T01:52:27.781263960Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6b5bd4454d-ztj5g,Uid:2b8ae71f-feef-4ce8-962e-e5fda1140771,Namespace:calico-apiserver,Attempt:0,}" Jul 2 01:52:27.789849 env[1474]: time="2024-07-02T01:52:27.789650894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6b5bd4454d-k9qss,Uid:5fd43d6c-b239-4718-83f4-9942c7e155de,Namespace:calico-apiserver,Attempt:0,}" Jul 2 01:52:27.959060 systemd-networkd[1625]: cali7b1b15065ac: Link UP Jul 2 01:52:27.968949 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7b1b15065ac: link becomes ready Jul 2 01:52:27.968137 systemd-networkd[1625]: cali7b1b15065ac: Gained carrier Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.864 [INFO][4928] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0 calico-apiserver-6b5bd4454d- calico-apiserver 2b8ae71f-feef-4ce8-962e-e5fda1140771 867 0 2024-07-02 01:52:25 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6b5bd4454d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 calico-apiserver-6b5bd4454d-ztj5g eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7b1b15065ac [] []}} ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.865 [INFO][4928] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.918 [INFO][4952] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" HandleID="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.929 [INFO][4952] ipam_plugin.go 264: Auto assigning IP ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" HandleID="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000298970), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"calico-apiserver-6b5bd4454d-ztj5g", "timestamp":"2024-07-02 01:52:27.91867812 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.929 [INFO][4952] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.929 [INFO][4952] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.929 [INFO][4952] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.932 [INFO][4952] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.938 [INFO][4952] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.942 [INFO][4952] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.943 [INFO][4952] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.945 [INFO][4952] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.945 [INFO][4952] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.947 [INFO][4952] ipam.go 1685: Creating new handle: k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925 Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.950 [INFO][4952] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.955 [INFO][4952] ipam.go 1216: Successfully claimed IPs: [192.168.114.197/26] block=192.168.114.192/26 handle="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.955 [INFO][4952] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.197/26] handle="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.955 [INFO][4952] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:27.989830 env[1474]: 2024-07-02 01:52:27.955 [INFO][4952] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.197/26] IPv6=[] ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" HandleID="k8s-pod-network.54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.956 [INFO][4928] k8s.go 386: Populated endpoint ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0", GenerateName:"calico-apiserver-6b5bd4454d-", Namespace:"calico-apiserver", SelfLink:"", UID:"2b8ae71f-feef-4ce8-962e-e5fda1140771", ResourceVersion:"867", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6b5bd4454d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"calico-apiserver-6b5bd4454d-ztj5g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.114.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b1b15065ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.957 [INFO][4928] k8s.go 387: Calico CNI using IPs: [192.168.114.197/32] ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.957 [INFO][4928] dataplane_linux.go 68: Setting the host side veth name to cali7b1b15065ac ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.959 [INFO][4928] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.976 [INFO][4928] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0", GenerateName:"calico-apiserver-6b5bd4454d-", Namespace:"calico-apiserver", SelfLink:"", UID:"2b8ae71f-feef-4ce8-962e-e5fda1140771", ResourceVersion:"867", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6b5bd4454d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925", Pod:"calico-apiserver-6b5bd4454d-ztj5g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.114.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7b1b15065ac", MAC:"96:e0:ef:45:fa:88", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:27.990469 env[1474]: 2024-07-02 01:52:27.986 [INFO][4928] k8s.go 500: Wrote updated endpoint to datastore ContainerID="54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-ztj5g" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--ztj5g-eth0" Jul 2 01:52:28.011231 systemd-networkd[1625]: calif2d8cca3ce3: Link UP Jul 2 01:52:28.019415 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif2d8cca3ce3: link becomes ready Jul 2 01:52:28.023709 systemd-networkd[1625]: calif2d8cca3ce3: Gained carrier Jul 2 01:52:28.024294 env[1474]: time="2024-07-02T01:52:28.020080764Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:28.024294 env[1474]: time="2024-07-02T01:52:28.020115523Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:28.024294 env[1474]: time="2024-07-02T01:52:28.020125323Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:28.024294 env[1474]: time="2024-07-02T01:52:28.020224882Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925 pid=4987 runtime=io.containerd.runc.v2 Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.894 [INFO][4933] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0 calico-apiserver-6b5bd4454d- calico-apiserver 5fd43d6c-b239-4718-83f4-9942c7e155de 871 0 2024-07-02 01:52:25 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6b5bd4454d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.5-a-b4a22a1448 calico-apiserver-6b5bd4454d-k9qss eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif2d8cca3ce3 [] []}} ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.894 [INFO][4933] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.922 [INFO][4959] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" HandleID="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.940 [INFO][4959] ipam_plugin.go 264: Auto assigning IP ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" HandleID="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002f41b0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.5-a-b4a22a1448", "pod":"calico-apiserver-6b5bd4454d-k9qss", "timestamp":"2024-07-02 01:52:27.922223892 +0000 UTC"}, Hostname:"ci-3510.3.5-a-b4a22a1448", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.941 [INFO][4959] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.955 [INFO][4959] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.955 [INFO][4959] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.5-a-b4a22a1448' Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.967 [INFO][4959] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.971 [INFO][4959] ipam.go 372: Looking up existing affinities for host host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.975 [INFO][4959] ipam.go 489: Trying affinity for 192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.978 [INFO][4959] ipam.go 155: Attempting to load block cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.980 [INFO][4959] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.114.192/26 host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.980 [INFO][4959] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.114.192/26 handle="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.986 [INFO][4959] ipam.go 1685: Creating new handle: k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:27.994 [INFO][4959] ipam.go 1203: Writing block in order to claim IPs block=192.168.114.192/26 handle="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:28.000 [INFO][4959] ipam.go 1216: Successfully claimed IPs: [192.168.114.198/26] block=192.168.114.192/26 handle="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:28.000 [INFO][4959] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.114.198/26] handle="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" host="ci-3510.3.5-a-b4a22a1448" Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:28.000 [INFO][4959] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 01:52:28.043401 env[1474]: 2024-07-02 01:52:28.000 [INFO][4959] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.114.198/26] IPv6=[] ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" HandleID="k8s-pod-network.df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Workload="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.002 [INFO][4933] k8s.go 386: Populated endpoint ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0", GenerateName:"calico-apiserver-6b5bd4454d-", Namespace:"calico-apiserver", SelfLink:"", UID:"5fd43d6c-b239-4718-83f4-9942c7e155de", ResourceVersion:"871", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6b5bd4454d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"", Pod:"calico-apiserver-6b5bd4454d-k9qss", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.114.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif2d8cca3ce3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.002 [INFO][4933] k8s.go 387: Calico CNI using IPs: [192.168.114.198/32] ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.002 [INFO][4933] dataplane_linux.go 68: Setting the host side veth name to calif2d8cca3ce3 ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.021 [INFO][4933] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.024 [INFO][4933] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0", GenerateName:"calico-apiserver-6b5bd4454d-", Namespace:"calico-apiserver", SelfLink:"", UID:"5fd43d6c-b239-4718-83f4-9942c7e155de", ResourceVersion:"871", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 1, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6b5bd4454d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.5-a-b4a22a1448", ContainerID:"df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff", Pod:"calico-apiserver-6b5bd4454d-k9qss", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.114.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif2d8cca3ce3", MAC:"b2:b9:6d:95:fd:d3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 01:52:28.043936 env[1474]: 2024-07-02 01:52:28.040 [INFO][4933] k8s.go 500: Wrote updated endpoint to datastore ContainerID="df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff" Namespace="calico-apiserver" Pod="calico-apiserver-6b5bd4454d-k9qss" WorkloadEndpoint="ci--3510.3.5--a--b4a22a1448-k8s-calico--apiserver--6b5bd4454d--k9qss-eth0" Jul 2 01:52:28.052000 audit[5012]: NETFILTER_CFG table=filter:114 family=2 entries=61 op=nft_register_chain pid=5012 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:28.052000 audit[5012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30316 a0=3 a1=ffffcc053f90 a2=0 a3=ffff83456fa8 items=0 ppid=4465 pid=5012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.052000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:28.058517 systemd[1]: Started cri-containerd-54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925.scope. Jul 2 01:52:28.071000 audit[5023]: NETFILTER_CFG table=filter:115 family=2 entries=51 op=nft_register_chain pid=5023 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 01:52:28.071000 audit[5023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25948 a0=3 a1=fffff64b40b0 a2=0 a3=ffff976ccfa8 items=0 ppid=4465 pid=5023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.071000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 01:52:28.080887 env[1474]: time="2024-07-02T01:52:28.079751778Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 01:52:28.080887 env[1474]: time="2024-07-02T01:52:28.079798818Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 01:52:28.080887 env[1474]: time="2024-07-02T01:52:28.079810098Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 01:52:28.080887 env[1474]: time="2024-07-02T01:52:28.079952856Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff pid=5032 runtime=io.containerd.runc.v2 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.087000 audit: BPF prog-id=178 op=LOAD Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4987 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613038323065336233343761333932653861643364366635383830 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4987 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613038323065336233343761333932653861643364366635383830 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.088000 audit: BPF prog-id=179 op=LOAD Jul 2 01:52:28.088000 audit[5001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4987 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613038323065336233343761333932653861643364366635383830 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.089000 audit: BPF prog-id=180 op=LOAD Jul 2 01:52:28.089000 audit[5001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4987 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613038323065336233343761333932653861643364366635383830 Jul 2 01:52:28.090000 audit: BPF prog-id=180 op=UNLOAD Jul 2 01:52:28.090000 audit: BPF prog-id=179 op=UNLOAD Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { perfmon } for pid=5001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit[5001]: AVC avc: denied { bpf } for pid=5001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.090000 audit: BPF prog-id=181 op=LOAD Jul 2 01:52:28.090000 audit[5001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4987 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534613038323065336233343761333932653861643364366635383830 Jul 2 01:52:28.105745 systemd[1]: Started cri-containerd-df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff.scope. Jul 2 01:52:28.131316 env[1474]: time="2024-07-02T01:52:28.131269816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6b5bd4454d-ztj5g,Uid:2b8ae71f-feef-4ce8-962e-e5fda1140771,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925\"" Jul 2 01:52:28.136105 env[1474]: time="2024-07-02T01:52:28.136069099Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.134000 audit: BPF prog-id=182 op=LOAD Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5032 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466363339343339393332393237366364366339343630383039386462 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5032 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466363339343339393332393237366364366339343630383039386462 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit: BPF prog-id=183 op=LOAD Jul 2 01:52:28.135000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5032 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466363339343339393332393237366364366339343630383039386462 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.135000 audit: BPF prog-id=184 op=LOAD Jul 2 01:52:28.135000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5032 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466363339343339393332393237366364366339343630383039386462 Jul 2 01:52:28.136000 audit: BPF prog-id=184 op=UNLOAD Jul 2 01:52:28.136000 audit: BPF prog-id=183 op=UNLOAD Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:28.136000 audit: BPF prog-id=185 op=LOAD Jul 2 01:52:28.136000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5032 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:28.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466363339343339393332393237366364366339343630383039386462 Jul 2 01:52:28.161363 env[1474]: time="2024-07-02T01:52:28.160666427Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6b5bd4454d-k9qss,Uid:5fd43d6c-b239-4718-83f4-9942c7e155de,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff\"" Jul 2 01:52:29.170109 systemd-networkd[1625]: calif2d8cca3ce3: Gained IPv6LL Jul 2 01:52:29.553456 systemd-networkd[1625]: cali7b1b15065ac: Gained IPv6LL Jul 2 01:52:30.080806 env[1474]: time="2024-07-02T01:52:30.080744189Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.089879 env[1474]: time="2024-07-02T01:52:30.089832359Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.094194 env[1474]: time="2024-07-02T01:52:30.094162006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.099214 env[1474]: time="2024-07-02T01:52:30.099188247Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.099822 env[1474]: time="2024-07-02T01:52:30.099794402Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac\"" Jul 2 01:52:30.100855 env[1474]: time="2024-07-02T01:52:30.100829794Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 01:52:30.102658 env[1474]: time="2024-07-02T01:52:30.102621221Z" level=info msg="CreateContainer within sandbox \"54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 01:52:30.153766 env[1474]: time="2024-07-02T01:52:30.153707227Z" level=info msg="CreateContainer within sandbox \"54a0820e3b347a392e8ad3d6f588054a71e270a86f5bcae505d43169dfc36925\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ebc2c3baa5aa7ee9f3e8f5f60e6bd69fe811520caafbfcb5d61a71a31e8f8840\"" Jul 2 01:52:30.154594 env[1474]: time="2024-07-02T01:52:30.154571661Z" level=info msg="StartContainer for \"ebc2c3baa5aa7ee9f3e8f5f60e6bd69fe811520caafbfcb5d61a71a31e8f8840\"" Jul 2 01:52:30.174201 systemd[1]: Started cri-containerd-ebc2c3baa5aa7ee9f3e8f5f60e6bd69fe811520caafbfcb5d61a71a31e8f8840.scope. Jul 2 01:52:30.180213 systemd[1]: run-containerd-runc-k8s.io-ebc2c3baa5aa7ee9f3e8f5f60e6bd69fe811520caafbfcb5d61a71a31e8f8840-runc.vbgwcF.mount: Deactivated successfully. Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.209000 audit: BPF prog-id=186 op=LOAD Jul 2 01:52:30.210000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.210000 audit[5084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4987 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633263336261613561613765653966336538663566363065366264 Jul 2 01:52:30.210000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.210000 audit[5084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4987 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633263336261613561613765653966336538663566363065366264 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit: BPF prog-id=187 op=LOAD Jul 2 01:52:30.211000 audit[5084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4987 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633263336261613561613765653966336538663566363065366264 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.211000 audit: BPF prog-id=188 op=LOAD Jul 2 01:52:30.211000 audit[5084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4987 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633263336261613561613765653966336538663566363065366264 Jul 2 01:52:30.212000 audit: BPF prog-id=188 op=UNLOAD Jul 2 01:52:30.212000 audit: BPF prog-id=187 op=UNLOAD Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.212000 audit: BPF prog-id=189 op=LOAD Jul 2 01:52:30.212000 audit[5084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4987 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633263336261613561613765653966336538663566363065366264 Jul 2 01:52:30.244124 env[1474]: time="2024-07-02T01:52:30.244079732Z" level=info msg="StartContainer for \"ebc2c3baa5aa7ee9f3e8f5f60e6bd69fe811520caafbfcb5d61a71a31e8f8840\" returns successfully" Jul 2 01:52:30.413211 env[1474]: time="2024-07-02T01:52:30.413114912Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.423258 env[1474]: time="2024-07-02T01:52:30.423223594Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.429025 env[1474]: time="2024-07-02T01:52:30.428987590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.436639 env[1474]: time="2024-07-02T01:52:30.436613371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 01:52:30.437279 env[1474]: time="2024-07-02T01:52:30.437255446Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac\"" Jul 2 01:52:30.441065 env[1474]: time="2024-07-02T01:52:30.441041057Z" level=info msg="CreateContainer within sandbox \"df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 01:52:30.485183 env[1474]: time="2024-07-02T01:52:30.485145878Z" level=info msg="CreateContainer within sandbox \"df6394399329276cd6c94608098db83820aaac150c5f20eb1d98b43ead860eff\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"699bb426c897e76e6add0cc9cc2ec14aa074bef21496eee64e4084bab28c7f69\"" Jul 2 01:52:30.485971 env[1474]: time="2024-07-02T01:52:30.485930871Z" level=info msg="StartContainer for \"699bb426c897e76e6add0cc9cc2ec14aa074bef21496eee64e4084bab28c7f69\"" Jul 2 01:52:30.499989 systemd[1]: Started cri-containerd-699bb426c897e76e6add0cc9cc2ec14aa074bef21496eee64e4084bab28c7f69.scope. Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.530000 audit: BPF prog-id=190 op=LOAD Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=5032 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639396262343236633839376537366536616464306363396363326563 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=5032 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639396262343236633839376537366536616464306363396363326563 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit: BPF prog-id=191 op=LOAD Jul 2 01:52:30.531000 audit[5127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=5032 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639396262343236633839376537366536616464306363396363326563 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit: BPF prog-id=192 op=LOAD Jul 2 01:52:30.531000 audit[5127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=5032 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639396262343236633839376537366536616464306363396363326563 Jul 2 01:52:30.531000 audit: BPF prog-id=192 op=UNLOAD Jul 2 01:52:30.531000 audit: BPF prog-id=191 op=UNLOAD Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { perfmon } for pid=5127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit[5127]: AVC avc: denied { bpf } for pid=5127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:52:30.531000 audit: BPF prog-id=193 op=LOAD Jul 2 01:52:30.531000 audit[5127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=5032 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639396262343236633839376537366536616464306363396363326563 Jul 2 01:52:30.774456 env[1474]: time="2024-07-02T01:52:30.774023855Z" level=info msg="StartContainer for \"699bb426c897e76e6add0cc9cc2ec14aa074bef21496eee64e4084bab28c7f69\" returns successfully" Jul 2 01:52:30.809000 audit[5157]: NETFILTER_CFG table=filter:116 family=2 entries=10 op=nft_register_rule pid=5157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:30.809000 audit[5157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffca20af50 a2=0 a3=1 items=0 ppid=2729 pid=5157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:30.810000 audit[5157]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=5157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:30.810000 audit[5157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffca20af50 a2=0 a3=1 items=0 ppid=2729 pid=5157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:30.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.138274 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount328614004.mount: Deactivated successfully. Jul 2 01:52:31.172368 kernel: kauditd_printk_skb: 242 callbacks suppressed Jul 2 01:52:31.172510 kernel: audit: type=1400 audit(1719885151.165:1254): avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:52:31.165000 audit[5095]: AVC avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:52:31.165000 audit[5095]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000985660 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:52:31.227591 kernel: audit: type=1300 audit(1719885151.165:1254): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000985660 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:52:31.165000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:52:31.251632 kernel: audit: type=1327 audit(1719885151.165:1254): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:52:31.792699 kubelet[2593]: I0702 01:52:31.792668 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6b5bd4454d-ztj5g" podStartSLOduration=4.8278686440000005 podStartE2EDuration="6.79263174s" podCreationTimestamp="2024-07-02 01:52:25 +0000 UTC" firstStartedPulling="2024-07-02 01:52:28.135473423 +0000 UTC m=+68.972909954" lastFinishedPulling="2024-07-02 01:52:30.100236479 +0000 UTC m=+70.937673050" observedRunningTime="2024-07-02 01:52:30.796402763 +0000 UTC m=+71.633839334" watchObservedRunningTime="2024-07-02 01:52:31.79263174 +0000 UTC m=+72.630068311" Jul 2 01:52:31.809501 kubelet[2593]: I0702 01:52:31.809465 2593 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6b5bd4454d-k9qss" podStartSLOduration=4.534001302 podStartE2EDuration="6.809424731s" podCreationTimestamp="2024-07-02 01:52:25 +0000 UTC" firstStartedPulling="2024-07-02 01:52:28.162639971 +0000 UTC m=+69.000076542" lastFinishedPulling="2024-07-02 01:52:30.4380634 +0000 UTC m=+71.275499971" observedRunningTime="2024-07-02 01:52:31.794326807 +0000 UTC m=+72.631763378" watchObservedRunningTime="2024-07-02 01:52:31.809424731 +0000 UTC m=+72.646861262" Jul 2 01:52:31.834000 audit[5164]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=5164 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.834000 audit[5164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffd1f9e130 a2=0 a3=1 items=0 ppid=2729 pid=5164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.875032 kernel: audit: type=1325 audit(1719885151.834:1255): table=filter:118 family=2 entries=10 op=nft_register_rule pid=5164 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.875153 kernel: audit: type=1300 audit(1719885151.834:1255): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffd1f9e130 a2=0 a3=1 items=0 ppid=2729 pid=5164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.891981 kernel: audit: type=1327 audit(1719885151.834:1255): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.834000 audit[5164]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=5164 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.905439 kernel: audit: type=1325 audit(1719885151.834:1256): table=nat:119 family=2 entries=20 op=nft_register_rule pid=5164 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.907359 kernel: audit: type=1300 audit(1719885151.834:1256): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd1f9e130 a2=0 a3=1 items=0 ppid=2729 pid=5164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.834000 audit[5164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd1f9e130 a2=0 a3=1 items=0 ppid=2729 pid=5164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.946210 kernel: audit: type=1327 audit(1719885151.834:1256): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.905000 audit[5166]: NETFILTER_CFG table=filter:120 family=2 entries=9 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.960596 kernel: audit: type=1325 audit(1719885151.905:1257): table=filter:120 family=2 entries=9 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.905000 audit[5166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff708f2a0 a2=0 a3=1 items=0 ppid=2729 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.905000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:31.911000 audit[5138]: AVC avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:52:31.911000 audit[5138]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f31e20 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:52:31.911000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:52:31.911000 audit[5166]: NETFILTER_CFG table=nat:121 family=2 entries=27 op=nft_register_chain pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:31.911000 audit[5166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff708f2a0 a2=0 a3=1 items=0 ppid=2729 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:31.911000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:32.869000 audit[5168]: NETFILTER_CFG table=filter:122 family=2 entries=8 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:32.869000 audit[5168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffcd085d40 a2=0 a3=1 items=0 ppid=2729 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:32.869000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:32.870000 audit[5168]: NETFILTER_CFG table=nat:123 family=2 entries=34 op=nft_register_chain pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:52:32.870000 audit[5168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffcd085d40 a2=0 a3=1 items=0 ppid=2729 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:52:32.870000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:52:51.464059 systemd[1]: run-containerd-runc-k8s.io-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26-runc.EAKz0b.mount: Deactivated successfully. Jul 2 01:52:51.599765 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.wswUcP.mount: Deactivated successfully. Jul 2 01:52:54.460885 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.aowk1k.mount: Deactivated successfully. Jul 2 01:53:15.324231 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 2 01:53:15.324445 kernel: audit: type=1400 audit(1719885195.318:1262): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.318000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.318000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581be0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:15.374992 kernel: audit: type=1300 audit(1719885195.318:1262): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581be0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:15.375353 kernel: audit: type=1327 audit(1719885195.318:1262): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:15.318000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:15.324000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.423822 kernel: audit: type=1400 audit(1719885195.324:1263): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.423962 kernel: audit: type=1300 audit(1719885195.324:1263): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400276fec0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:15.324000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400276fec0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:15.324000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:15.476428 kernel: audit: type=1327 audit(1719885195.324:1263): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:15.671000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.671000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4005aef440 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.725245 kernel: audit: type=1400 audit(1719885195.671:1264): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.725395 kernel: audit: type=1300 audit(1719885195.671:1264): arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4005aef440 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.671000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.751666 kernel: audit: type=1327 audit(1719885195.671:1264): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.678000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.776525 kernel: audit: type=1400 audit(1719885195.678:1265): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.678000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=40060a1890 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.692000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.692000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4008efe220 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.692000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.692000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.692000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4005aef650 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.692000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.768000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.768000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4005aef7a0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.768000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:15.768000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:15.768000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4008efe260 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:53:15.768000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:53:20.458000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.463447 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 2 01:53:20.463580 kernel: audit: type=1400 audit(1719885200.458:1270): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.458000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581e60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.512488 kernel: audit: type=1300 audit(1719885200.458:1270): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581e60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.512671 kernel: audit: type=1327 audit(1719885200.458:1270): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.458000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.556111 kernel: audit: type=1400 audit(1719885200.461:1271): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581e80 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.584900 kernel: audit: type=1300 audit(1719885200.461:1271): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002581e80 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.608855 kernel: audit: type=1327 audit(1719885200.461:1271): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.463000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.630417 kernel: audit: type=1400 audit(1719885200.463:1272): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.463000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40029ad180 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.658715 kernel: audit: type=1300 audit(1719885200.463:1272): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40029ad180 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.658839 kernel: audit: type=1327 audit(1719885200.463:1272): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:20.464000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.703901 kernel: audit: type=1400 audit(1719885200.464:1273): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:53:20.464000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002a68020 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:53:20.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:53:21.466932 systemd[1]: run-containerd-runc-k8s.io-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26-runc.14uCnN.mount: Deactivated successfully. Jul 2 01:53:22.458124 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.SnU5Dv.mount: Deactivated successfully. Jul 2 01:53:31.201000 audit[5095]: AVC avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:53:31.206484 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 2 01:53:31.206616 kernel: audit: type=1400 audit(1719885211.201:1274): avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:53:31.201000 audit[5095]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40009e5b60 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:53:31.259360 kernel: audit: type=1300 audit(1719885211.201:1274): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40009e5b60 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:53:31.201000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:53:31.282665 kernel: audit: type=1327 audit(1719885211.201:1274): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:53:31.914000 audit[5138]: AVC avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:53:31.914000 audit[5138]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400209a1c0 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:53:31.968999 kernel: audit: type=1400 audit(1719885211.914:1275): avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:53:31.969145 kernel: audit: type=1300 audit(1719885211.914:1275): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400209a1c0 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:53:31.914000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:53:31.994268 kernel: audit: type=1327 audit(1719885211.914:1275): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:53:51.465148 systemd[1]: run-containerd-runc-k8s.io-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26-runc.6AZlni.mount: Deactivated successfully. Jul 2 01:53:51.600830 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.bFz69A.mount: Deactivated successfully. Jul 2 01:53:54.466119 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.e2c5Ts.mount: Deactivated successfully. Jul 2 01:54:15.324000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.324000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.368312 kernel: audit: type=1400 audit(1719885255.324:1276): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.368439 kernel: audit: type=1400 audit(1719885255.324:1277): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.324000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ff7e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:15.396366 kernel: audit: type=1300 audit(1719885255.324:1277): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ff7e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:15.324000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:15.418943 kernel: audit: type=1327 audit(1719885255.324:1277): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:15.324000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40029d4ba0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:15.446664 kernel: audit: type=1300 audit(1719885255.324:1276): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40029d4ba0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:15.324000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:15.469450 kernel: audit: type=1327 audit(1719885255.324:1276): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:15.673000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.673000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=400883aab0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.722139 kernel: audit: type=1400 audit(1719885255.673:1278): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.722242 kernel: audit: type=1300 audit(1719885255.673:1278): arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=400883aab0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.673000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.744930 kernel: audit: type=1327 audit(1719885255.673:1278): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.694000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.766731 kernel: audit: type=1400 audit(1719885255.694:1279): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.694000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4010375b00 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.694000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.694000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.694000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=400883aae0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.694000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.695000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.695000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=400d39d500 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.695000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.768000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.768000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:15.768000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400d39d560 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.768000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=62 a1=4010375e60 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:54:15.768000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:15.768000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:54:19.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.39:22-10.200.16.10:54192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:19.595662 systemd[1]: Started sshd@7-10.200.20.39:22-10.200.16.10:54192.service. Jul 2 01:54:20.027000 audit[5438]: USER_ACCT pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.028997 sshd[5438]: Accepted publickey for core from 10.200.16.10 port 54192 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:20.029000 audit[5438]: CRED_ACQ pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.029000 audit[5438]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9526b20 a2=3 a3=1 items=0 ppid=1 pid=5438 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:20.029000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:20.030800 sshd[5438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:20.035997 systemd-logind[1463]: New session 10 of user core. Jul 2 01:54:20.040122 systemd[1]: Started session-10.scope. Jul 2 01:54:20.045000 audit[5438]: USER_START pid=5438 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.047000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.467128 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 2 01:54:20.467227 kernel: audit: type=1400 audit(1719885260.461:1290): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f372c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.513308 sshd[5438]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:20.539724 kernel: audit: type=1400 audit(1719885260.461:1291): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.539874 kernel: audit: type=1300 audit(1719885260.461:1291): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f372c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.540554 systemd[1]: sshd@7-10.200.20.39:22-10.200.16.10:54192.service: Deactivated successfully. Jul 2 01:54:20.541371 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 01:54:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.542286 systemd-logind[1463]: Session 10 logged out. Waiting for processes to exit. Jul 2 01:54:20.565444 kernel: audit: type=1327 audit(1719885260.461:1291): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.462000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.587545 kernel: audit: type=1400 audit(1719885260.462:1292): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.462000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f37ac0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.588498 systemd-logind[1463]: Removed session 10. Jul 2 01:54:20.617668 kernel: audit: type=1300 audit(1719885260.462:1292): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f37ac0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.646713 kernel: audit: type=1327 audit(1719885260.462:1292): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.463000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.669202 kernel: audit: type=1400 audit(1719885260.463:1293): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:54:20.463000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9a100 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.697975 kernel: audit: type=1300 audit(1719885260.463:1293): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e9a100 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.721931 kernel: audit: type=1327 audit(1719885260.463:1293): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40013f2960 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:54:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:54:20.513000 audit[5438]: USER_END pid=5438 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.513000 audit[5438]: CRED_DISP pid=5438 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:20.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.39:22-10.200.16.10:54192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:21.466802 systemd[1]: run-containerd-runc-k8s.io-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26-runc.IHzhjD.mount: Deactivated successfully. Jul 2 01:54:21.610846 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.E8zlym.mount: Deactivated successfully. Jul 2 01:54:25.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.39:22-10.200.16.10:54198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:25.571943 systemd[1]: Started sshd@8-10.200.20.39:22-10.200.16.10:54198.service. Jul 2 01:54:25.577063 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 2 01:54:25.577214 kernel: audit: type=1130 audit(1719885265.570:1297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.39:22-10.200.16.10:54198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:26.006000 audit[5493]: USER_ACCT pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.008248 sshd[5493]: Accepted publickey for core from 10.200.16.10 port 54198 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:26.030000 audit[5493]: CRED_ACQ pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.032662 sshd[5493]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:26.053706 kernel: audit: type=1101 audit(1719885266.006:1298): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.053843 kernel: audit: type=1103 audit(1719885266.030:1299): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.068381 kernel: audit: type=1006 audit(1719885266.030:1300): pid=5493 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 2 01:54:26.030000 audit[5493]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0b32b10 a2=3 a3=1 items=0 ppid=1 pid=5493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:26.092899 kernel: audit: type=1300 audit(1719885266.030:1300): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0b32b10 a2=3 a3=1 items=0 ppid=1 pid=5493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:26.030000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:26.095542 kernel: audit: type=1327 audit(1719885266.030:1300): proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:26.095164 systemd-logind[1463]: New session 11 of user core. Jul 2 01:54:26.095661 systemd[1]: Started session-11.scope. Jul 2 01:54:26.108000 audit[5493]: USER_START pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.133000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.156541 kernel: audit: type=1105 audit(1719885266.108:1301): pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.156668 kernel: audit: type=1103 audit(1719885266.133:1302): pid=5500 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.463448 sshd[5493]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:26.463000 audit[5493]: USER_END pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.463000 audit[5493]: CRED_DISP pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.510706 kernel: audit: type=1106 audit(1719885266.463:1303): pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.510829 kernel: audit: type=1104 audit(1719885266.463:1304): pid=5493 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:26.511084 systemd[1]: sshd@8-10.200.20.39:22-10.200.16.10:54198.service: Deactivated successfully. Jul 2 01:54:26.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.39:22-10.200.16.10:54198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:26.511873 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 01:54:26.512531 systemd-logind[1463]: Session 11 logged out. Waiting for processes to exit. Jul 2 01:54:26.513432 systemd-logind[1463]: Removed session 11. Jul 2 01:54:31.202000 audit[5095]: AVC avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:54:31.207992 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:54:31.208125 kernel: audit: type=1400 audit(1719885271.202:1306): avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:54:31.202000 audit[5095]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000985b40 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:54:31.263849 kernel: audit: type=1300 audit(1719885271.202:1306): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000985b40 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:54:31.202000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:54:31.287921 kernel: audit: type=1327 audit(1719885271.202:1306): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:54:31.535555 systemd[1]: Started sshd@9-10.200.20.39:22-10.200.16.10:50636.service. Jul 2 01:54:31.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.39:22-10.200.16.10:50636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:31.559454 kernel: audit: type=1130 audit(1719885271.534:1307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.39:22-10.200.16.10:50636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:31.914000 audit[5138]: AVC avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:54:31.914000 audit[5138]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a16180 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:54:31.971281 kernel: audit: type=1400 audit(1719885271.914:1308): avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:54:31.971427 kernel: audit: type=1300 audit(1719885271.914:1308): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a16180 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:54:31.914000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:54:31.995282 kernel: audit: type=1327 audit(1719885271.914:1308): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:54:32.000000 audit[5510]: USER_ACCT pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.001932 sshd[5510]: Accepted publickey for core from 10.200.16.10 port 50636 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:32.026072 sshd[5510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:32.026461 kernel: audit: type=1101 audit(1719885272.000:1309): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.026523 kernel: audit: type=1103 audit(1719885272.024:1310): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.024000 audit[5510]: CRED_ACQ pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.060795 kernel: audit: type=1006 audit(1719885272.024:1311): pid=5510 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 2 01:54:32.024000 audit[5510]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3a3e4b0 a2=3 a3=1 items=0 ppid=1 pid=5510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:32.024000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:32.064654 systemd-logind[1463]: New session 12 of user core. Jul 2 01:54:32.065099 systemd[1]: Started session-12.scope. Jul 2 01:54:32.068000 audit[5510]: USER_START pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.069000 audit[5512]: CRED_ACQ pid=5512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.421910 sshd[5510]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:32.421000 audit[5510]: USER_END pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.422000 audit[5510]: CRED_DISP pid=5510 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.425283 systemd-logind[1463]: Session 12 logged out. Waiting for processes to exit. Jul 2 01:54:32.425492 systemd[1]: sshd@9-10.200.20.39:22-10.200.16.10:50636.service: Deactivated successfully. Jul 2 01:54:32.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.39:22-10.200.16.10:50636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:32.426254 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 01:54:32.426961 systemd-logind[1463]: Removed session 12. Jul 2 01:54:32.499263 systemd[1]: Started sshd@10-10.200.20.39:22-10.200.16.10:50648.service. Jul 2 01:54:32.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.39:22-10.200.16.10:50648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:32.961000 audit[5522]: USER_ACCT pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.963435 sshd[5522]: Accepted publickey for core from 10.200.16.10 port 50648 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:32.964000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.964000 audit[5522]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7ed0740 a2=3 a3=1 items=0 ppid=1 pid=5522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:32.964000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:32.966127 sshd[5522]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:32.970581 systemd-logind[1463]: New session 13 of user core. Jul 2 01:54:32.971083 systemd[1]: Started session-13.scope. Jul 2 01:54:32.974000 audit[5522]: USER_START pid=5522 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:32.976000 audit[5524]: CRED_ACQ pid=5524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.420261 sshd[5522]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:33.420000 audit[5522]: USER_END pid=5522 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.420000 audit[5522]: CRED_DISP pid=5522 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.423783 systemd[1]: sshd@10-10.200.20.39:22-10.200.16.10:50648.service: Deactivated successfully. Jul 2 01:54:33.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.39:22-10.200.16.10:50648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:33.424587 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 01:54:33.425116 systemd-logind[1463]: Session 13 logged out. Waiting for processes to exit. Jul 2 01:54:33.426003 systemd-logind[1463]: Removed session 13. Jul 2 01:54:33.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.39:22-10.200.16.10:50650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:33.497305 systemd[1]: Started sshd@11-10.200.20.39:22-10.200.16.10:50650.service. Jul 2 01:54:33.960784 sshd[5531]: Accepted publickey for core from 10.200.16.10 port 50650 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:33.959000 audit[5531]: USER_ACCT pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.960000 audit[5531]: CRED_ACQ pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.961000 audit[5531]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf623e00 a2=3 a3=1 items=0 ppid=1 pid=5531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:33.961000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:33.962697 sshd[5531]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:33.966785 systemd-logind[1463]: New session 14 of user core. Jul 2 01:54:33.967668 systemd[1]: Started session-14.scope. Jul 2 01:54:33.971000 audit[5531]: USER_START pid=5531 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:33.972000 audit[5533]: CRED_ACQ pid=5533 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:34.370444 sshd[5531]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:34.370000 audit[5531]: USER_END pid=5531 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:34.370000 audit[5531]: CRED_DISP pid=5531 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:34.373157 systemd-logind[1463]: Session 14 logged out. Waiting for processes to exit. Jul 2 01:54:34.373430 systemd[1]: sshd@11-10.200.20.39:22-10.200.16.10:50650.service: Deactivated successfully. Jul 2 01:54:34.374216 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 01:54:34.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.39:22-10.200.16.10:50650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:34.374997 systemd-logind[1463]: Removed session 14. Jul 2 01:54:39.461541 kernel: kauditd_printk_skb: 29 callbacks suppressed Jul 2 01:54:39.477068 kernel: audit: type=1130 audit(1719885279.447:1335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.39:22-10.200.16.10:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:39.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.39:22-10.200.16.10:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:39.448916 systemd[1]: Started sshd@12-10.200.20.39:22-10.200.16.10:52864.service. Jul 2 01:54:39.918000 audit[5555]: USER_ACCT pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:39.920787 sshd[5555]: Accepted publickey for core from 10.200.16.10 port 52864 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:39.921632 sshd[5555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:39.919000 audit[5555]: CRED_ACQ pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:39.944395 kernel: audit: type=1101 audit(1719885279.918:1336): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:39.979686 kernel: audit: type=1103 audit(1719885279.919:1337): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:39.979805 kernel: audit: type=1006 audit(1719885279.920:1338): pid=5555 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 01:54:39.920000 audit[5555]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcf76b70 a2=3 a3=1 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:40.005515 systemd[1]: Started session-15.scope. Jul 2 01:54:40.006137 systemd-logind[1463]: New session 15 of user core. Jul 2 01:54:39.920000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:40.015103 kernel: audit: type=1300 audit(1719885279.920:1338): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcf76b70 a2=3 a3=1 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:40.015241 kernel: audit: type=1327 audit(1719885279.920:1338): proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:40.019000 audit[5555]: USER_START pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.045000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.068313 kernel: audit: type=1105 audit(1719885280.019:1339): pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.068442 kernel: audit: type=1103 audit(1719885280.045:1340): pid=5560 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.380221 sshd[5555]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:40.379000 audit[5555]: USER_END pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.405656 systemd[1]: sshd@12-10.200.20.39:22-10.200.16.10:52864.service: Deactivated successfully. Jul 2 01:54:40.380000 audit[5555]: CRED_DISP pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.406420 kernel: audit: type=1106 audit(1719885280.379:1341): pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.406461 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 01:54:40.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.39:22-10.200.16.10:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:40.427439 kernel: audit: type=1104 audit(1719885280.380:1342): pid=5555 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:40.427381 systemd-logind[1463]: Session 15 logged out. Waiting for processes to exit. Jul 2 01:54:40.428135 systemd-logind[1463]: Removed session 15. Jul 2 01:54:45.460793 systemd[1]: Started sshd@13-10.200.20.39:22-10.200.16.10:52872.service. Jul 2 01:54:45.488395 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:54:45.488497 kernel: audit: type=1130 audit(1719885285.459:1344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.39:22-10.200.16.10:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:45.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.39:22-10.200.16.10:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:45.930000 audit[5570]: USER_ACCT pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.931629 sshd[5570]: Accepted publickey for core from 10.200.16.10 port 52872 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:45.933444 sshd[5570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:45.931000 audit[5570]: CRED_ACQ pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.975257 kernel: audit: type=1101 audit(1719885285.930:1345): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.975436 kernel: audit: type=1103 audit(1719885285.931:1346): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.980834 systemd[1]: Started session-16.scope. Jul 2 01:54:45.981396 systemd-logind[1463]: New session 16 of user core. Jul 2 01:54:45.989058 kernel: audit: type=1006 audit(1719885285.931:1347): pid=5570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 01:54:45.989161 kernel: audit: type=1300 audit(1719885285.931:1347): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdc77920 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:45.931000 audit[5570]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdc77920 a2=3 a3=1 items=0 ppid=1 pid=5570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:45.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:46.018828 kernel: audit: type=1327 audit(1719885285.931:1347): proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:46.018932 kernel: audit: type=1105 audit(1719885285.985:1348): pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.985000 audit[5570]: USER_START pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:45.987000 audit[5572]: CRED_ACQ pid=5572 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.066750 kernel: audit: type=1103 audit(1719885285.987:1349): pid=5572 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.340561 sshd[5570]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:46.340000 audit[5570]: USER_END pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.345145 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 01:54:46.346068 systemd[1]: sshd@13-10.200.20.39:22-10.200.16.10:52872.service: Deactivated successfully. Jul 2 01:54:46.342000 audit[5570]: CRED_DISP pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.392729 kernel: audit: type=1106 audit(1719885286.340:1350): pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.392895 kernel: audit: type=1104 audit(1719885286.342:1351): pid=5570 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:46.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.39:22-10.200.16.10:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:46.393088 systemd-logind[1463]: Session 16 logged out. Waiting for processes to exit. Jul 2 01:54:46.394056 systemd-logind[1463]: Removed session 16. Jul 2 01:54:51.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.39:22-10.200.16.10:36872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:51.411821 systemd[1]: Started sshd@14-10.200.20.39:22-10.200.16.10:36872.service. Jul 2 01:54:51.416624 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:54:51.416719 kernel: audit: type=1130 audit(1719885291.410:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.39:22-10.200.16.10:36872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:51.838000 audit[5594]: USER_ACCT pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.840578 sshd[5594]: Accepted publickey for core from 10.200.16.10 port 36872 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:51.864186 sshd[5594]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:51.864522 kernel: audit: type=1101 audit(1719885291.838:1354): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.864562 kernel: audit: type=1103 audit(1719885291.862:1355): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.862000 audit[5594]: CRED_ACQ pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.898727 kernel: audit: type=1006 audit(1719885291.862:1356): pid=5594 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 01:54:51.862000 audit[5594]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef0626c0 a2=3 a3=1 items=0 ppid=1 pid=5594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:51.921458 kernel: audit: type=1300 audit(1719885291.862:1356): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef0626c0 a2=3 a3=1 items=0 ppid=1 pid=5594 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:51.862000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:51.925024 systemd-logind[1463]: New session 17 of user core. Jul 2 01:54:51.925638 systemd[1]: Started session-17.scope. Jul 2 01:54:51.933092 kernel: audit: type=1327 audit(1719885291.862:1356): proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:51.933196 kernel: audit: type=1105 audit(1719885291.929:1357): pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.929000 audit[5594]: USER_START pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.931000 audit[5640]: CRED_ACQ pid=5640 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:51.975499 kernel: audit: type=1103 audit(1719885291.931:1358): pid=5640 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:52.249564 sshd[5594]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:52.249000 audit[5594]: USER_END pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:52.253201 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 01:54:52.254087 systemd[1]: sshd@14-10.200.20.39:22-10.200.16.10:36872.service: Deactivated successfully. Jul 2 01:54:52.275444 systemd-logind[1463]: Session 17 logged out. Waiting for processes to exit. Jul 2 01:54:52.276299 systemd-logind[1463]: Removed session 17. Jul 2 01:54:52.250000 audit[5594]: CRED_DISP pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:52.297192 kernel: audit: type=1106 audit(1719885292.249:1359): pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:52.297369 kernel: audit: type=1104 audit(1719885292.250:1360): pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:52.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.39:22-10.200.16.10:36872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:54.467133 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.LIPAyW.mount: Deactivated successfully. Jul 2 01:54:57.323030 systemd[1]: Started sshd@15-10.200.20.39:22-10.200.16.10:36884.service. Jul 2 01:54:57.348773 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:54:57.348911 kernel: audit: type=1130 audit(1719885297.321:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.39:22-10.200.16.10:36884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:57.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.39:22-10.200.16.10:36884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:57.754000 audit[5671]: USER_ACCT pid=5671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.756377 sshd[5671]: Accepted publickey for core from 10.200.16.10 port 36884 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:57.758271 sshd[5671]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:57.756000 audit[5671]: CRED_ACQ pid=5671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.800810 kernel: audit: type=1101 audit(1719885297.754:1363): pid=5671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.800921 kernel: audit: type=1103 audit(1719885297.756:1364): pid=5671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.814678 kernel: audit: type=1006 audit(1719885297.756:1365): pid=5671 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 2 01:54:57.805206 systemd[1]: Started session-18.scope. Jul 2 01:54:57.806373 systemd-logind[1463]: New session 18 of user core. Jul 2 01:54:57.756000 audit[5671]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc08ffc00 a2=3 a3=1 items=0 ppid=1 pid=5671 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:57.756000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:57.846284 kernel: audit: type=1300 audit(1719885297.756:1365): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc08ffc00 a2=3 a3=1 items=0 ppid=1 pid=5671 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:57.846545 kernel: audit: type=1327 audit(1719885297.756:1365): proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:57.846583 kernel: audit: type=1105 audit(1719885297.805:1366): pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.805000 audit[5671]: USER_START pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.810000 audit[5673]: CRED_ACQ pid=5673 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:57.898230 kernel: audit: type=1103 audit(1719885297.810:1367): pid=5673 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.158566 sshd[5671]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:58.158000 audit[5671]: USER_END pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.187137 systemd[1]: sshd@15-10.200.20.39:22-10.200.16.10:36884.service: Deactivated successfully. Jul 2 01:54:58.158000 audit[5671]: CRED_DISP pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.208864 kernel: audit: type=1106 audit(1719885298.158:1368): pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.208986 kernel: audit: type=1104 audit(1719885298.158:1369): pid=5671 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.187952 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 01:54:58.209205 systemd-logind[1463]: Session 18 logged out. Waiting for processes to exit. Jul 2 01:54:58.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.39:22-10.200.16.10:36884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:58.210046 systemd-logind[1463]: Removed session 18. Jul 2 01:54:58.236877 systemd[1]: Started sshd@16-10.200.20.39:22-10.200.16.10:36894.service. Jul 2 01:54:58.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.39:22-10.200.16.10:36894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:58.698000 audit[5688]: USER_ACCT pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.699929 sshd[5688]: Accepted publickey for core from 10.200.16.10 port 36894 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:58.699000 audit[5688]: CRED_ACQ pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.700000 audit[5688]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6fb34b0 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:58.700000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:58.701680 sshd[5688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:58.706159 systemd[1]: Started session-19.scope. Jul 2 01:54:58.707435 systemd-logind[1463]: New session 19 of user core. Jul 2 01:54:58.710000 audit[5688]: USER_START pid=5688 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:58.711000 audit[5690]: CRED_ACQ pid=5690 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.182802 sshd[5688]: pam_unix(sshd:session): session closed for user core Jul 2 01:54:59.182000 audit[5688]: USER_END pid=5688 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.182000 audit[5688]: CRED_DISP pid=5688 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.185744 systemd-logind[1463]: Session 19 logged out. Waiting for processes to exit. Jul 2 01:54:59.185999 systemd[1]: sshd@16-10.200.20.39:22-10.200.16.10:36894.service: Deactivated successfully. Jul 2 01:54:59.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.39:22-10.200.16.10:36894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:59.186770 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 01:54:59.187632 systemd-logind[1463]: Removed session 19. Jul 2 01:54:59.254496 systemd[1]: Started sshd@17-10.200.20.39:22-10.200.16.10:34124.service. Jul 2 01:54:59.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.39:22-10.200.16.10:34124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:54:59.684000 audit[5697]: USER_ACCT pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.686075 sshd[5697]: Accepted publickey for core from 10.200.16.10 port 34124 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:54:59.686000 audit[5697]: CRED_ACQ pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.686000 audit[5697]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdcc2b570 a2=3 a3=1 items=0 ppid=1 pid=5697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:54:59.686000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:54:59.687886 sshd[5697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:54:59.692527 systemd[1]: Started session-20.scope. Jul 2 01:54:59.692869 systemd-logind[1463]: New session 20 of user core. Jul 2 01:54:59.696000 audit[5697]: USER_START pid=5697 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:54:59.698000 audit[5699]: CRED_ACQ pid=5699 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:01.627000 audit[5711]: NETFILTER_CFG table=filter:124 family=2 entries=20 op=nft_register_rule pid=5711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:01.627000 audit[5711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffdd210c10 a2=0 a3=1 items=0 ppid=2729 pid=5711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:01.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:01.628000 audit[5711]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=5711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:01.628000 audit[5711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffdd210c10 a2=0 a3=1 items=0 ppid=2729 pid=5711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:01.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:01.668000 audit[5717]: NETFILTER_CFG table=filter:126 family=2 entries=32 op=nft_register_rule pid=5717 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:01.668000 audit[5717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=fffff8b520d0 a2=0 a3=1 items=0 ppid=2729 pid=5717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:01.668000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:01.669000 audit[5717]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5717 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:01.669000 audit[5717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff8b520d0 a2=0 a3=1 items=0 ppid=2729 pid=5717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:01.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:01.722177 sshd[5697]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:01.722000 audit[5697]: USER_END pid=5697 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:01.722000 audit[5697]: CRED_DISP pid=5697 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:01.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.39:22-10.200.16.10:34124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:01.725168 systemd[1]: sshd@17-10.200.20.39:22-10.200.16.10:34124.service: Deactivated successfully. Jul 2 01:55:01.726061 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 01:55:01.727180 systemd-logind[1463]: Session 20 logged out. Waiting for processes to exit. Jul 2 01:55:01.728352 systemd-logind[1463]: Removed session 20. Jul 2 01:55:01.798605 systemd[1]: Started sshd@18-10.200.20.39:22-10.200.16.10:34138.service. Jul 2 01:55:01.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.39:22-10.200.16.10:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:02.262000 audit[5720]: USER_ACCT pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.264003 sshd[5720]: Accepted publickey for core from 10.200.16.10 port 34138 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:02.264000 audit[5720]: CRED_ACQ pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.264000 audit[5720]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd96ec290 a2=3 a3=1 items=0 ppid=1 pid=5720 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:02.264000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:02.265769 sshd[5720]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:02.270137 systemd-logind[1463]: New session 21 of user core. Jul 2 01:55:02.270710 systemd[1]: Started session-21.scope. Jul 2 01:55:02.274000 audit[5720]: USER_START pid=5720 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.275000 audit[5722]: CRED_ACQ pid=5722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.786556 sshd[5720]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:02.786000 audit[5720]: USER_END pid=5720 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.792502 kernel: kauditd_printk_skb: 43 callbacks suppressed Jul 2 01:55:02.792571 kernel: audit: type=1106 audit(1719885302.786:1399): pid=5720 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.796673 systemd[1]: sshd@18-10.200.20.39:22-10.200.16.10:34138.service: Deactivated successfully. Jul 2 01:55:02.797572 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 01:55:02.799152 systemd-logind[1463]: Session 21 logged out. Waiting for processes to exit. Jul 2 01:55:02.800259 systemd-logind[1463]: Removed session 21. Jul 2 01:55:02.786000 audit[5720]: CRED_DISP pid=5720 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.837169 kernel: audit: type=1104 audit(1719885302.786:1400): pid=5720 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:02.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.39:22-10.200.16.10:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:02.857606 kernel: audit: type=1131 audit(1719885302.795:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.39:22-10.200.16.10:34138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:02.894316 systemd[1]: Started sshd@19-10.200.20.39:22-10.200.16.10:34150.service. Jul 2 01:55:02.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.39:22-10.200.16.10:34150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:02.919911 kernel: audit: type=1130 audit(1719885302.893:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.39:22-10.200.16.10:34150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:03.360000 audit[5731]: USER_ACCT pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.361922 sshd[5731]: Accepted publickey for core from 10.200.16.10 port 34150 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:03.384395 kernel: audit: type=1101 audit(1719885303.360:1403): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.383000 audit[5731]: CRED_ACQ pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.385829 sshd[5731]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:03.420265 kernel: audit: type=1103 audit(1719885303.383:1404): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.420417 kernel: audit: type=1006 audit(1719885303.384:1405): pid=5731 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 01:55:03.384000 audit[5731]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4a64790 a2=3 a3=1 items=0 ppid=1 pid=5731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:03.444054 kernel: audit: type=1300 audit(1719885303.384:1405): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4a64790 a2=3 a3=1 items=0 ppid=1 pid=5731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:03.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:03.453295 kernel: audit: type=1327 audit(1719885303.384:1405): proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:03.454307 systemd-logind[1463]: New session 22 of user core. Jul 2 01:55:03.454623 systemd[1]: Started session-22.scope. Jul 2 01:55:03.458000 audit[5731]: USER_START pid=5731 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.484000 audit[5733]: CRED_ACQ pid=5733 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.486355 kernel: audit: type=1105 audit(1719885303.458:1406): pid=5731 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.821615 sshd[5731]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:03.821000 audit[5731]: USER_END pid=5731 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.821000 audit[5731]: CRED_DISP pid=5731 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:03.824778 systemd[1]: sshd@19-10.200.20.39:22-10.200.16.10:34150.service: Deactivated successfully. Jul 2 01:55:03.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.39:22-10.200.16.10:34150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:03.825624 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 01:55:03.826667 systemd-logind[1463]: Session 22 logged out. Waiting for processes to exit. Jul 2 01:55:03.827578 systemd-logind[1463]: Removed session 22. Jul 2 01:55:08.920464 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 2 01:55:08.920618 kernel: audit: type=1130 audit(1719885308.903:1411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.39:22-10.200.16.10:36648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:08.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.39:22-10.200.16.10:36648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:08.904449 systemd[1]: Started sshd@20-10.200.20.39:22-10.200.16.10:36648.service. Jul 2 01:55:09.303000 audit[5755]: NETFILTER_CFG table=filter:128 family=2 entries=20 op=nft_register_rule pid=5755 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:09.303000 audit[5755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffffdb1bde0 a2=0 a3=1 items=0 ppid=2729 pid=5755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:09.344419 kernel: audit: type=1325 audit(1719885309.303:1412): table=filter:128 family=2 entries=20 op=nft_register_rule pid=5755 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:09.344549 kernel: audit: type=1300 audit(1719885309.303:1412): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffffdb1bde0 a2=0 a3=1 items=0 ppid=2729 pid=5755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:09.303000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:09.357179 kernel: audit: type=1327 audit(1719885309.303:1412): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:09.306000 audit[5755]: NETFILTER_CFG table=nat:129 family=2 entries=106 op=nft_register_chain pid=5755 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:09.306000 audit[5755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=fffffdb1bde0 a2=0 a3=1 items=0 ppid=2729 pid=5755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:09.398721 kernel: audit: type=1325 audit(1719885309.306:1413): table=nat:129 family=2 entries=106 op=nft_register_chain pid=5755 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 01:55:09.398846 kernel: audit: type=1300 audit(1719885309.306:1413): arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=fffffdb1bde0 a2=0 a3=1 items=0 ppid=2729 pid=5755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:09.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:09.401018 sshd[5752]: Accepted publickey for core from 10.200.16.10 port 36648 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:09.413189 kernel: audit: type=1327 audit(1719885309.306:1413): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 01:55:09.413968 sshd[5752]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:09.398000 audit[5752]: USER_ACCT pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.436648 kernel: audit: type=1101 audit(1719885309.398:1414): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.412000 audit[5752]: CRED_ACQ pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.460195 kernel: audit: type=1103 audit(1719885309.412:1415): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.474524 kernel: audit: type=1006 audit(1719885309.412:1416): pid=5752 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 01:55:09.412000 audit[5752]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccd2a590 a2=3 a3=1 items=0 ppid=1 pid=5752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:09.412000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:09.474207 systemd-logind[1463]: New session 23 of user core. Jul 2 01:55:09.475111 systemd[1]: Started session-23.scope. Jul 2 01:55:09.482000 audit[5752]: USER_START pid=5752 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.483000 audit[5757]: CRED_ACQ pid=5757 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.820459 sshd[5752]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:09.820000 audit[5752]: USER_END pid=5752 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.820000 audit[5752]: CRED_DISP pid=5752 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:09.823510 systemd[1]: sshd@20-10.200.20.39:22-10.200.16.10:36648.service: Deactivated successfully. Jul 2 01:55:09.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.39:22-10.200.16.10:36648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:09.824306 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 01:55:09.824847 systemd-logind[1463]: Session 23 logged out. Waiting for processes to exit. Jul 2 01:55:09.825625 systemd-logind[1463]: Removed session 23. Jul 2 01:55:14.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.39:22-10.200.16.10:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:14.899612 systemd[1]: Started sshd@21-10.200.20.39:22-10.200.16.10:36652.service. Jul 2 01:55:14.904448 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 01:55:14.904585 kernel: audit: type=1130 audit(1719885314.898:1422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.39:22-10.200.16.10:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:15.325000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.325000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d216e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:15.382500 kernel: audit: type=1400 audit(1719885315.325:1423): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.382626 kernel: audit: type=1300 audit(1719885315.325:1423): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d216e0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:15.325000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:15.409922 kernel: audit: type=1327 audit(1719885315.325:1423): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:15.410600 sshd[5766]: Accepted publickey for core from 10.200.16.10 port 36652 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:15.414036 sshd[5766]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:15.419703 systemd[1]: Started session-24.scope. Jul 2 01:55:15.420178 systemd-logind[1463]: New session 24 of user core. Jul 2 01:55:15.336000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.446386 kernel: audit: type=1400 audit(1719885315.336:1424): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.336000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e25e30 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:15.478230 kernel: audit: type=1300 audit(1719885315.336:1424): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e25e30 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:15.336000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:15.505068 kernel: audit: type=1327 audit(1719885315.336:1424): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:15.409000 audit[5766]: USER_ACCT pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.530353 kernel: audit: type=1101 audit(1719885315.409:1425): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.412000 audit[5766]: CRED_ACQ pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.554924 kernel: audit: type=1103 audit(1719885315.412:1426): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.570983 kernel: audit: type=1006 audit(1719885315.412:1427): pid=5766 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 01:55:15.412000 audit[5766]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff9333f0 a2=3 a3=1 items=0 ppid=1 pid=5766 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:15.412000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:15.573000 audit[5766]: USER_START pid=5766 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.574000 audit[5768]: CRED_ACQ pid=5768 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.674000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.674000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40148be930 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.696000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.696000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40148bed80 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.696000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.696000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.696000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400ec66dc0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.696000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.696000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.696000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40148eb530 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.696000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.769000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.769000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400ec670e0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.769000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:15.769000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=40148beff0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:55:15.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:55:15.918703 sshd[5766]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:15.918000 audit[5766]: USER_END pid=5766 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.918000 audit[5766]: CRED_DISP pid=5766 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:15.922034 systemd-logind[1463]: Session 24 logged out. Waiting for processes to exit. Jul 2 01:55:15.922387 systemd[1]: sshd@21-10.200.20.39:22-10.200.16.10:36652.service: Deactivated successfully. Jul 2 01:55:15.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.39:22-10.200.16.10:36652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:15.923185 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 01:55:15.924318 systemd-logind[1463]: Removed session 24. Jul 2 01:55:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.467915 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 2 01:55:20.468041 kernel: audit: type=1400 audit(1719885320.461:1439): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d21bc0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.519774 kernel: audit: type=1300 audit(1719885320.461:1439): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d21bc0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.545244 kernel: audit: type=1327 audit(1719885320.461:1439): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.568027 kernel: audit: type=1400 audit(1719885320.461:1440): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002df1020 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.597866 kernel: audit: type=1300 audit(1719885320.461:1440): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002df1020 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.624397 kernel: audit: type=1327 audit(1719885320.461:1440): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.646654 kernel: audit: type=1400 audit(1719885320.461:1441): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d21d60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.676471 kernel: audit: type=1300 audit(1719885320.461:1441): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002d21d60 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.701105 kernel: audit: type=1327 audit(1719885320.461:1441): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:20.461000 audit[2449]: AVC avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.723232 kernel: audit: type=1400 audit(1719885320.461:1442): avc: denied { watch } for pid=2449 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:20.461000 audit[2449]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002df11c0 a2=fc6 a3=0 items=0 ppid=2306 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:20.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:21.002735 systemd[1]: Started sshd@22-10.200.20.39:22-10.200.16.10:55534.service. Jul 2 01:55:21.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.39:22-10.200.16.10:55534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:21.468000 audit[5797]: USER_ACCT pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.471029 sshd[5797]: Accepted publickey for core from 10.200.16.10 port 55534 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:21.470000 audit[5797]: CRED_ACQ pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.470000 audit[5797]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6330740 a2=3 a3=1 items=0 ppid=1 pid=5797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:21.470000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:21.472137 sshd[5797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:21.476974 systemd[1]: Started session-25.scope. Jul 2 01:55:21.478156 systemd-logind[1463]: New session 25 of user core. Jul 2 01:55:21.481000 audit[5797]: USER_START pid=5797 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.482000 audit[5820]: CRED_ACQ pid=5820 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.607008 systemd[1]: run-containerd-runc-k8s.io-9fea871a203360e886e3b1532bd3663c31c8590e5cfbf184a5e7f2b5231c68bc-runc.BLJCws.mount: Deactivated successfully. Jul 2 01:55:21.877578 sshd[5797]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:21.877000 audit[5797]: USER_END pid=5797 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.877000 audit[5797]: CRED_DISP pid=5797 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:21.880517 systemd-logind[1463]: Session 25 logged out. Waiting for processes to exit. Jul 2 01:55:21.881107 systemd[1]: sshd@22-10.200.20.39:22-10.200.16.10:55534.service: Deactivated successfully. Jul 2 01:55:21.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.39:22-10.200.16.10:55534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:21.881867 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 01:55:21.882615 systemd-logind[1463]: Removed session 25. Jul 2 01:55:26.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.39:22-10.200.16.10:55550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:26.955059 systemd[1]: Started sshd@23-10.200.20.39:22-10.200.16.10:55550.service. Jul 2 01:55:26.960130 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 01:55:26.960245 kernel: audit: type=1130 audit(1719885326.953:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.39:22-10.200.16.10:55550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:27.428000 audit[5850]: USER_ACCT pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.429945 sshd[5850]: Accepted publickey for core from 10.200.16.10 port 55550 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:27.451000 audit[5850]: CRED_ACQ pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.453640 sshd[5850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:27.474288 kernel: audit: type=1101 audit(1719885327.428:1453): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.474434 kernel: audit: type=1103 audit(1719885327.451:1454): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.487424 kernel: audit: type=1006 audit(1719885327.451:1455): pid=5850 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 2 01:55:27.451000 audit[5850]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb44b3a0 a2=3 a3=1 items=0 ppid=1 pid=5850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:27.492010 systemd[1]: Started session-26.scope. Jul 2 01:55:27.493440 systemd-logind[1463]: New session 26 of user core. Jul 2 01:55:27.512618 kernel: audit: type=1300 audit(1719885327.451:1455): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb44b3a0 a2=3 a3=1 items=0 ppid=1 pid=5850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:27.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:27.520418 kernel: audit: type=1327 audit(1719885327.451:1455): proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:27.520549 kernel: audit: type=1105 audit(1719885327.496:1456): pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.496000 audit[5850]: USER_START pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.498000 audit[5852]: CRED_ACQ pid=5852 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.564997 kernel: audit: type=1103 audit(1719885327.498:1457): pid=5852 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.901444 sshd[5850]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:27.901000 audit[5850]: USER_END pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.904236 systemd-logind[1463]: Session 26 logged out. Waiting for processes to exit. Jul 2 01:55:27.905444 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 01:55:27.906605 systemd-logind[1463]: Removed session 26. Jul 2 01:55:27.907303 systemd[1]: sshd@23-10.200.20.39:22-10.200.16.10:55550.service: Deactivated successfully. Jul 2 01:55:27.901000 audit[5850]: CRED_DISP pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.948435 kernel: audit: type=1106 audit(1719885327.901:1458): pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.948549 kernel: audit: type=1104 audit(1719885327.901:1459): pid=5850 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:27.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.39:22-10.200.16.10:55550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:31.203000 audit[5095]: AVC avc: denied { watch } for pid=5095 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.1122286270/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c902,c935 tclass=file permissive=0 Jul 2 01:55:31.203000 audit[5095]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000985a40 a2=fc6 a3=0 items=0 ppid=4987 pid=5095 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c902,c935 key=(null) Jul 2 01:55:31.203000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:55:31.916000 audit[5138]: AVC avc: denied { watch } for pid=5138 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_01_52_27.3920954096/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c342,c758 tclass=file permissive=0 Jul 2 01:55:31.916000 audit[5138]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a171e0 a2=fc6 a3=0 items=0 ppid=5032 pid=5138 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c342,c758 key=(null) Jul 2 01:55:31.916000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 01:55:32.972998 systemd[1]: Started sshd@24-10.200.20.39:22-10.200.16.10:50770.service. Jul 2 01:55:32.998640 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 01:55:32.998775 kernel: audit: type=1130 audit(1719885332.971:1463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.39:22-10.200.16.10:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:32.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.39:22-10.200.16.10:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:33.404000 audit[5866]: USER_ACCT pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.406141 sshd[5866]: Accepted publickey for core from 10.200.16.10 port 50770 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:33.408969 sshd[5866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:33.406000 audit[5866]: CRED_ACQ pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.452358 kernel: audit: type=1101 audit(1719885333.404:1464): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.452489 kernel: audit: type=1103 audit(1719885333.406:1465): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.467854 kernel: audit: type=1006 audit(1719885333.407:1466): pid=5866 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 2 01:55:33.407000 audit[5866]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7e7d310 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:33.491254 kernel: audit: type=1300 audit(1719885333.407:1466): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7e7d310 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:33.407000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:33.499424 kernel: audit: type=1327 audit(1719885333.407:1466): proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:33.501106 systemd[1]: Started session-27.scope. Jul 2 01:55:33.501272 systemd-logind[1463]: New session 27 of user core. Jul 2 01:55:33.504000 audit[5866]: USER_START pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.529000 audit[5868]: CRED_ACQ pid=5868 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.550784 kernel: audit: type=1105 audit(1719885333.504:1467): pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.550896 kernel: audit: type=1103 audit(1719885333.529:1468): pid=5868 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.857196 sshd[5866]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:33.856000 audit[5866]: USER_END pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.882555 systemd[1]: sshd@24-10.200.20.39:22-10.200.16.10:50770.service: Deactivated successfully. Jul 2 01:55:33.856000 audit[5866]: CRED_DISP pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.903633 kernel: audit: type=1106 audit(1719885333.856:1469): pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.903776 kernel: audit: type=1104 audit(1719885333.856:1470): pid=5866 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:33.883378 systemd[1]: session-27.scope: Deactivated successfully. Jul 2 01:55:33.904004 systemd-logind[1463]: Session 27 logged out. Waiting for processes to exit. Jul 2 01:55:33.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.39:22-10.200.16.10:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:33.904886 systemd-logind[1463]: Removed session 27. Jul 2 01:55:38.936247 systemd[1]: Started sshd@25-10.200.20.39:22-10.200.16.10:48350.service. Jul 2 01:55:38.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.39:22-10.200.16.10:48350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:38.941688 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:55:38.941891 kernel: audit: type=1130 audit(1719885338.935:1472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.39:22-10.200.16.10:48350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:39.423000 audit[5879]: USER_ACCT pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.428648 sshd[5879]: Accepted publickey for core from 10.200.16.10 port 48350 ssh2: RSA SHA256:dIfkHgYeMkxYvU2An9TnjkrclLrmoTNY/YaaZP40c9o Jul 2 01:55:39.429588 sshd[5879]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 01:55:39.423000 audit[5879]: CRED_ACQ pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.469541 kernel: audit: type=1101 audit(1719885339.423:1473): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.469662 kernel: audit: type=1103 audit(1719885339.423:1474): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.469702 kernel: audit: type=1006 audit(1719885339.423:1475): pid=5879 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Jul 2 01:55:39.423000 audit[5879]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1cdb030 a2=3 a3=1 items=0 ppid=1 pid=5879 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:39.505122 kernel: audit: type=1300 audit(1719885339.423:1475): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1cdb030 a2=3 a3=1 items=0 ppid=1 pid=5879 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:39.423000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:39.513569 kernel: audit: type=1327 audit(1719885339.423:1475): proctitle=737368643A20636F7265205B707269765D Jul 2 01:55:39.517063 systemd-logind[1463]: New session 28 of user core. Jul 2 01:55:39.518108 systemd[1]: Started session-28.scope. Jul 2 01:55:39.521000 audit[5879]: USER_START pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.547000 audit[5881]: CRED_ACQ pid=5881 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.569948 kernel: audit: type=1105 audit(1719885339.521:1476): pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.570077 kernel: audit: type=1103 audit(1719885339.547:1477): pid=5881 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.883584 sshd[5879]: pam_unix(sshd:session): session closed for user core Jul 2 01:55:39.883000 audit[5879]: USER_END pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.910448 systemd[1]: sshd@25-10.200.20.39:22-10.200.16.10:48350.service: Deactivated successfully. Jul 2 01:55:39.884000 audit[5879]: CRED_DISP pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.931647 kernel: audit: type=1106 audit(1719885339.883:1478): pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.931798 kernel: audit: type=1104 audit(1719885339.884:1479): pid=5879 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Jul 2 01:55:39.911265 systemd[1]: session-28.scope: Deactivated successfully. Jul 2 01:55:39.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.39:22-10.200.16.10:48350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 01:55:39.932283 systemd-logind[1463]: Session 28 logged out. Waiting for processes to exit. Jul 2 01:55:39.933284 systemd-logind[1463]: Removed session 28. Jul 2 01:55:51.467833 systemd[1]: run-containerd-runc-k8s.io-6b1ed278495729f837c11a91ecb0a12392c649b00bb84801a547bbf2430d9c26-runc.VjgRcv.mount: Deactivated successfully. Jul 2 01:55:54.830904 systemd[1]: cri-containerd-51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa.scope: Deactivated successfully. Jul 2 01:55:54.831231 systemd[1]: cri-containerd-51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa.scope: Consumed 5.689s CPU time. Jul 2 01:55:54.829000 audit: BPF prog-id=115 op=UNLOAD Jul 2 01:55:54.836353 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 01:55:54.836501 kernel: audit: type=1334 audit(1719885354.829:1481): prog-id=115 op=UNLOAD Jul 2 01:55:54.843747 kernel: audit: type=1334 audit(1719885354.842:1482): prog-id=118 op=UNLOAD Jul 2 01:55:54.842000 audit: BPF prog-id=118 op=UNLOAD Jul 2 01:55:54.862687 env[1474]: time="2024-07-02T01:55:54.862630543Z" level=info msg="shim disconnected" id=51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa Jul 2 01:55:54.862840 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa-rootfs.mount: Deactivated successfully. Jul 2 01:55:54.863197 env[1474]: time="2024-07-02T01:55:54.863161102Z" level=warning msg="cleaning up after shim disconnected" id=51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa namespace=k8s.io Jul 2 01:55:54.863280 env[1474]: time="2024-07-02T01:55:54.863267222Z" level=info msg="cleaning up dead shim" Jul 2 01:55:54.871196 env[1474]: time="2024-07-02T01:55:54.871155689Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:55:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5974 runtime=io.containerd.runc.v2\n" Jul 2 01:55:55.043265 systemd[1]: cri-containerd-42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370.scope: Deactivated successfully. Jul 2 01:55:55.043606 systemd[1]: cri-containerd-42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370.scope: Consumed 3.336s CPU time. Jul 2 01:55:55.046000 audit: BPF prog-id=78 op=UNLOAD Jul 2 01:55:55.062724 kernel: audit: type=1334 audit(1719885355.046:1483): prog-id=78 op=UNLOAD Jul 2 01:55:55.062851 kernel: audit: type=1334 audit(1719885355.046:1484): prog-id=85 op=UNLOAD Jul 2 01:55:55.046000 audit: BPF prog-id=85 op=UNLOAD Jul 2 01:55:55.077992 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370-rootfs.mount: Deactivated successfully. Jul 2 01:55:55.079291 env[1474]: time="2024-07-02T01:55:55.079244152Z" level=info msg="shim disconnected" id=42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370 Jul 2 01:55:55.079457 env[1474]: time="2024-07-02T01:55:55.079292032Z" level=warning msg="cleaning up after shim disconnected" id=42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370 namespace=k8s.io Jul 2 01:55:55.079457 env[1474]: time="2024-07-02T01:55:55.079302192Z" level=info msg="cleaning up dead shim" Jul 2 01:55:55.087784 env[1474]: time="2024-07-02T01:55:55.087669378Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:55:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5998 runtime=io.containerd.runc.v2\n" Jul 2 01:55:55.166889 kubelet[2593]: I0702 01:55:55.166133 2593 scope.go:117] "RemoveContainer" containerID="51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa" Jul 2 01:55:55.168698 env[1474]: time="2024-07-02T01:55:55.168652286Z" level=info msg="CreateContainer within sandbox \"9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 2 01:55:55.170478 kubelet[2593]: I0702 01:55:55.170444 2593 scope.go:117] "RemoveContainer" containerID="42e6ba94b1bc0cd716733b3ff0798a01ee5a0c8bf6e89f0959416bf8bb692370" Jul 2 01:55:55.173142 env[1474]: time="2024-07-02T01:55:55.173104919Z" level=info msg="CreateContainer within sandbox \"219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 2 01:55:55.209577 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2968870664.mount: Deactivated successfully. Jul 2 01:55:55.229195 env[1474]: time="2024-07-02T01:55:55.229136267Z" level=info msg="CreateContainer within sandbox \"9ab234542bd870a593ea411c63ec0da716a5e2315917282e467d1e4b93280434\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f\"" Jul 2 01:55:55.229881 env[1474]: time="2024-07-02T01:55:55.229846906Z" level=info msg="StartContainer for \"e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f\"" Jul 2 01:55:55.240124 env[1474]: time="2024-07-02T01:55:55.240022290Z" level=info msg="CreateContainer within sandbox \"219f1c5aab94f3da931b704bc66523aef280bb5de8dd5f0762fb62ca0450d23f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"c38f8822e171ef55723e25a60b619e392c848d2f52c40e90e524c3f5c95b72f7\"" Jul 2 01:55:55.240852 env[1474]: time="2024-07-02T01:55:55.240818128Z" level=info msg="StartContainer for \"c38f8822e171ef55723e25a60b619e392c848d2f52c40e90e524c3f5c95b72f7\"" Jul 2 01:55:55.246038 systemd[1]: Started cri-containerd-e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f.scope. Jul 2 01:55:55.255403 kubelet[2593]: E0702 01:55:55.254085 2593 controller.go:195] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.39:33818->10.200.20.13:2379: read: connection timed out" Jul 2 01:55:55.258966 systemd[1]: cri-containerd-a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9.scope: Deactivated successfully. Jul 2 01:55:55.259284 systemd[1]: cri-containerd-a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9.scope: Consumed 1.693s CPU time. Jul 2 01:55:55.261000 audit: BPF prog-id=74 op=UNLOAD Jul 2 01:55:55.261000 audit: BPF prog-id=90 op=UNLOAD Jul 2 01:55:55.274566 kernel: audit: type=1334 audit(1719885355.261:1485): prog-id=74 op=UNLOAD Jul 2 01:55:55.274700 kernel: audit: type=1334 audit(1719885355.261:1486): prog-id=90 op=UNLOAD Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.331377 kernel: audit: type=1400 audit(1719885355.289:1487): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.331522 kernel: audit: type=1400 audit(1719885355.289:1488): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.352753 kernel: audit: type=1400 audit(1719885355.289:1489): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.350004 systemd[1]: Started cri-containerd-c38f8822e171ef55723e25a60b619e392c848d2f52c40e90e524c3f5c95b72f7.scope. Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.369787 kernel: audit: type=1400 audit(1719885355.289:1490): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.289000 audit: BPF prog-id=194 op=LOAD Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2784 pid=6018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539396436666661363530313735353030643933646666636665306431 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2784 pid=6018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539396436666661363530313735353030643933646666636665306431 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit: BPF prog-id=195 op=LOAD Jul 2 01:55:55.306000 audit[6018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2784 pid=6018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539396436666661363530313735353030643933646666636665306431 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.306000 audit: BPF prog-id=196 op=LOAD Jul 2 01:55:55.306000 audit[6018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2784 pid=6018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539396436666661363530313735353030643933646666636665306431 Jul 2 01:55:55.307000 audit: BPF prog-id=196 op=UNLOAD Jul 2 01:55:55.307000 audit: BPF prog-id=195 op=UNLOAD Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { perfmon } for pid=6018 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit[6018]: AVC avc: denied { bpf } for pid=6018 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.307000 audit: BPF prog-id=197 op=LOAD Jul 2 01:55:55.307000 audit[6018]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2784 pid=6018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539396436666661363530313735353030643933646666636665306431 Jul 2 01:55:55.377401 env[1474]: time="2024-07-02T01:55:55.377351785Z" level=info msg="StartContainer for \"e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f\" returns successfully" Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.380000 audit: BPF prog-id=198 op=LOAD Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2306 pid=6041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386638383232653137316566353537323365323561363062363139 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2306 pid=6041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386638383232653137316566353537323365323561363062363139 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.381000 audit: BPF prog-id=199 op=LOAD Jul 2 01:55:55.381000 audit[6041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2306 pid=6041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386638383232653137316566353537323365323561363062363139 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.382000 audit: BPF prog-id=200 op=LOAD Jul 2 01:55:55.382000 audit[6041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2306 pid=6041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386638383232653137316566353537323365323561363062363139 Jul 2 01:55:55.383000 audit: BPF prog-id=200 op=UNLOAD Jul 2 01:55:55.383000 audit: BPF prog-id=199 op=UNLOAD Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { perfmon } for pid=6041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit[6041]: AVC avc: denied { bpf } for pid=6041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:55.383000 audit: BPF prog-id=201 op=LOAD Jul 2 01:55:55.383000 audit[6041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2306 pid=6041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:55.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386638383232653137316566353537323365323561363062363139 Jul 2 01:55:55.393047 env[1474]: time="2024-07-02T01:55:55.393001800Z" level=info msg="shim disconnected" id=a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9 Jul 2 01:55:55.393281 env[1474]: time="2024-07-02T01:55:55.393252080Z" level=warning msg="cleaning up after shim disconnected" id=a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9 namespace=k8s.io Jul 2 01:55:55.393399 env[1474]: time="2024-07-02T01:55:55.393385079Z" level=info msg="cleaning up dead shim" Jul 2 01:55:55.405502 env[1474]: time="2024-07-02T01:55:55.405383380Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:55:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6083 runtime=io.containerd.runc.v2\n" Jul 2 01:55:55.434505 env[1474]: time="2024-07-02T01:55:55.434444652Z" level=info msg="StartContainer for \"c38f8822e171ef55723e25a60b619e392c848d2f52c40e90e524c3f5c95b72f7\" returns successfully" Jul 2 01:55:55.461044 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9-rootfs.mount: Deactivated successfully. Jul 2 01:55:56.189838 kubelet[2593]: I0702 01:55:56.189806 2593 scope.go:117] "RemoveContainer" containerID="a5c1d2bbf6f67d9ab970fa673aae98d87e655e4f66b4fcf80a424fa34b5ddff9" Jul 2 01:55:56.192249 env[1474]: time="2024-07-02T01:55:56.192209171Z" level=info msg="CreateContainer within sandbox \"9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 2 01:55:56.218318 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1104699844.mount: Deactivated successfully. Jul 2 01:55:56.238637 env[1474]: time="2024-07-02T01:55:56.238575934Z" level=info msg="CreateContainer within sandbox \"9b794284738a0d74f4f7cb9a1bb02a3ea6c30eea44aebd7b7d10378dadc35bdf\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"c869a6a4d416421131410a947be145068c43f16da26a5a6a76b2de3a51c843df\"" Jul 2 01:55:56.239134 env[1474]: time="2024-07-02T01:55:56.239103333Z" level=info msg="StartContainer for \"c869a6a4d416421131410a947be145068c43f16da26a5a6a76b2de3a51c843df\"" Jul 2 01:55:56.268414 systemd[1]: Started cri-containerd-c869a6a4d416421131410a947be145068c43f16da26a5a6a76b2de3a51c843df.scope. Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit: BPF prog-id=202 op=LOAD Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2279 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:56.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338363961366134643431363432313133313431306139343762653134 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2279 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:56.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338363961366134643431363432313133313431306139343762653134 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.289000 audit: BPF prog-id=203 op=LOAD Jul 2 01:55:56.289000 audit[6114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2279 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:56.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338363961366134643431363432313133313431306139343762653134 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit: BPF prog-id=204 op=LOAD Jul 2 01:55:56.290000 audit[6114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2279 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:56.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338363961366134643431363432313133313431306139343762653134 Jul 2 01:55:56.290000 audit: BPF prog-id=204 op=UNLOAD Jul 2 01:55:56.290000 audit: BPF prog-id=203 op=UNLOAD Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { perfmon } for pid=6114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit[6114]: AVC avc: denied { bpf } for pid=6114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 01:55:56.290000 audit: BPF prog-id=205 op=LOAD Jul 2 01:55:56.290000 audit[6114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2279 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 01:55:56.290000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338363961366134643431363432313133313431306139343762653134 Jul 2 01:55:56.319471 env[1474]: time="2024-07-02T01:55:56.319405841Z" level=info msg="StartContainer for \"c869a6a4d416421131410a947be145068c43f16da26a5a6a76b2de3a51c843df\" returns successfully" Jul 2 01:55:57.319000 audit[6069]: AVC avc: denied { watch } for pid=6069 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:57.319000 audit[6069]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007604e0 a2=fc6 a3=0 items=0 ppid=2306 pid=6069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:57.319000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:55:57.319000 audit[6069]: AVC avc: denied { watch } for pid=6069 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:55:57.319000 audit[6069]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400067b1a0 a2=fc6 a3=0 items=0 ppid=2306 pid=6069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c636 key=(null) Jul 2 01:55:57.319000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 01:56:00.051457 kubelet[2593]: E0702 01:56:00.051426 2593 event.go:346] "Server rejected event (will not retry!)" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.39:33620->10.200.20.13:2379: read: connection timed out" event="&Event{ObjectMeta:{kube-apiserver-ci-3510.3.5-a-b4a22a1448.17de429cf6912e5e kube-system 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Pod,Namespace:kube-system,Name:kube-apiserver-ci-3510.3.5-a-b4a22a1448,UID:e5d2fe6c6a698b94221b2fcb484d4132,APIVersion:v1,ResourceVersion:,FieldPath:spec.containers{kube-apiserver},},Reason:Unhealthy,Message:Readiness probe failed: HTTP probe failed with statuscode: 500,Source:EventSource{Component:kubelet,Host:ci-3510.3.5-a-b4a22a1448,},FirstTimestamp:2024-07-02 01:55:49.621149278 +0000 UTC m=+270.458585809,LastTimestamp:2024-07-02 01:55:49.621149278 +0000 UTC m=+270.458585809,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.5-a-b4a22a1448,}" Jul 2 01:56:05.254764 kubelet[2593]: E0702 01:56:05.254732 2593 controller.go:195] "Failed to update lease" err="Put \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 2 01:56:05.618567 kubelet[2593]: I0702 01:56:05.618526 2593 status_manager.go:853] "Failed to get status for pod" podUID="a6046424-72b9-4d6e-b481-a2091e272535" pod="tigera-operator/tigera-operator-76c4974c85-pfqrm" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.39:33738->10.200.20.13:2379: read: connection timed out" Jul 2 01:56:06.966044 systemd[1]: cri-containerd-e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f.scope: Deactivated successfully. Jul 2 01:56:06.965000 audit: BPF prog-id=194 op=UNLOAD Jul 2 01:56:06.972914 kernel: kauditd_printk_skb: 173 callbacks suppressed Jul 2 01:56:06.973089 kernel: audit: type=1334 audit(1719885366.965:1543): prog-id=194 op=UNLOAD Jul 2 01:56:06.979000 audit: BPF prog-id=197 op=UNLOAD Jul 2 01:56:06.988420 kernel: audit: type=1334 audit(1719885366.979:1544): prog-id=197 op=UNLOAD Jul 2 01:56:07.001114 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f-rootfs.mount: Deactivated successfully. Jul 2 01:56:07.075176 env[1474]: time="2024-07-02T01:56:07.075130002Z" level=info msg="shim disconnected" id=e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f Jul 2 01:56:07.075668 env[1474]: time="2024-07-02T01:56:07.075645801Z" level=warning msg="cleaning up after shim disconnected" id=e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f namespace=k8s.io Jul 2 01:56:07.075739 env[1474]: time="2024-07-02T01:56:07.075725721Z" level=info msg="cleaning up dead shim" Jul 2 01:56:07.083428 env[1474]: time="2024-07-02T01:56:07.083385627Z" level=warning msg="cleanup warnings time=\"2024-07-02T01:56:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6164 runtime=io.containerd.runc.v2\n" Jul 2 01:56:07.215218 kubelet[2593]: I0702 01:56:07.215189 2593 scope.go:117] "RemoveContainer" containerID="51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa" Jul 2 01:56:07.215613 kubelet[2593]: I0702 01:56:07.215566 2593 scope.go:117] "RemoveContainer" containerID="e99d6ffa650175500d93dffcfe0d1da5db77035d260bceeba9e8c484ce07ab1f" Jul 2 01:56:07.215824 kubelet[2593]: E0702 01:56:07.215798 2593 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-76c4974c85-pfqrm_tigera-operator(a6046424-72b9-4d6e-b481-a2091e272535)\"" pod="tigera-operator/tigera-operator-76c4974c85-pfqrm" podUID="a6046424-72b9-4d6e-b481-a2091e272535" Jul 2 01:56:07.217467 env[1474]: time="2024-07-02T01:56:07.217074257Z" level=info msg="RemoveContainer for \"51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa\"" Jul 2 01:56:07.227348 env[1474]: time="2024-07-02T01:56:07.227293958Z" level=info msg="RemoveContainer for \"51dcb58ca99a52adb736189e5b5cebddd1bca0729a7321ba5bddc17d19171baa\" returns successfully" Jul 2 01:56:15.255473 kubelet[2593]: E0702 01:56:15.255435 2593 controller.go:195] "Failed to update lease" err="Put \"https://10.200.20.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.5-a-b4a22a1448?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 2 01:56:15.447357 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.463354 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.478512 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.494775 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.511355 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.526731 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.527066 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.544176 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.544520 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.562159 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.562453 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.578593 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.578878 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.595314 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.595671 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.620633 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.620919 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.621036 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.637994 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.638297 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.656640 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.656886 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.673228 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.673525 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.682707 kernel: audit: type=1400 audit(1719885375.676:1545): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.676000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.711223 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.711536 kernel: audit: type=1300 audit(1719885375.676:1545): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40073b5bf0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.676000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40073b5bf0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.772046 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.772427 kernel: audit: type=1327 audit(1719885375.676:1545): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.772477 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.691000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.801357 kernel: audit: type=1400 audit(1719885375.691:1546): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.801476 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.691000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40051a10a0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.844491 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.844785 kernel: audit: type=1300 audit(1719885375.691:1546): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40051a10a0 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.844873 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.691000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.878209 kernel: audit: type=1327 audit(1719885375.691:1546): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.878355 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.691000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:16.002042 kernel: audit: type=1400 audit(1719885375.691:1547): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:16.002241 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.002565 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.002801 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003076 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003228 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003395 kernel: audit: type=1300 audit(1719885375.691:1547): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4005726d50 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:16.003466 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003613 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003732 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.003849 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004009 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004166 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004318 kernel: audit: type=1327 audit(1719885375.691:1547): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:16.004404 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004558 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004699 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.004863 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.005031 kernel: audit: type=1400 audit(1719885375.701:1548): avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:16.005051 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.005181 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:15.691000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4005726d50 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.691000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.701000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.701000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40073b5d40 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.769000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.769000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=400aa4f860 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:15.769000 audit[2470]: AVC avc: denied { watch } for pid=2470 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520985 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 01:56:15.769000 audit[2470]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=58 a1=4006619a10 a2=fc6 a3=0 items=0 ppid=2339 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c923 key=(null) Jul 2 01:56:15.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 01:56:16.166292 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.166549 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.174842 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.183339 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.191629 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.217269 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.217554 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.217668 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.225508 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.233698 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.242024 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.259132 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.259420 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.275435 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.275660 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.283831 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.292117 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.300132 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.318758 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.319105 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.329812 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.338118 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.346587 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.354719 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.371818 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.372079 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.387562 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#273 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.387812 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#274 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.395847 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#275 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.403609 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.419296 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#215 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.419552 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#271 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001 Jul 2 01:56:16.427406 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#272 cmd 0x28 status: scsi 0x2 srb 0x4 hv 0xc0000001